Cybersecurity health check for a private hospital group
A multi-site private hospital group had no dedicated security function. We conducted a baseline health check across identity, endpoint, email, clinical systems access, backup posture, and incident readiness.
Identified 28 findings across 6 domains. Top priorities: shared clinical workstation credentials, no MFA on remote access, and backup recovery never tested. Delivered a 12-month remediation roadmap the COO could action with existing IT team.
