HIA Ready — Small Practice

A single monthly fee covering the software layer, the ongoing work and the documents that keep a small Singapore clinic aligned to the MOH Cybersecurity and Data Security Essentials under the Health Information Act.

What it covers

• Anti-malware on every endpoint, with automatic signature updates and on-access scanning
• Email and attachment security, including phishing protection
• Workstation backup, stored separately and isolated from the live environment
• Microsoft 365 backup — the alternative backup the Essentials ask for
• Microsoft 365 Business Premium controls: two-factor authentication, conditional access, device configuration, sensitivity labelling and encrypted email
• Patching, asset inventory and end-of-support tracking
• Access reviews and dormant-account removal
• Annual staff security and data protection awareness training
• The regular vulnerability reporting MOH asks you to request from your IT provider

And the documents

The part that usually takes the longest is included, written against how your practice actually runs and kept current as it changes:

• Access approval process — joiner, mover and leaver
• Hygiene policies for everyday practice
• Business continuity plan
• Incident response plan

What sits outside the monthly fee

• The one-time gap assessment against all thirteen measures — see HIA Compliance Assessment & Setup
• Round-the-clock monitoring, if you need the two-hour MOH notification window covered — see HIA Ready — Complete

Priced for a single-site practice of up to 5 users. Larger practices and multi-site groups are quoted from the assessment.

Read the full HIA compliance guide for Singapore clinics.

More than 5 people?

The first 5 users are included in the flat fee. Add extra users at S$200/user/mo — one unit per additional user, no ceiling. Multi-site groups, or anything that no longer fits this shape, are quoted from the assessment instead.

Want full Purview — eDiscovery, insider risk management, records management, endpoint DLP? See the optional Advanced Compliance Add-on, one unit per user you want upgraded. Not required for HIA compliance — this plan’s Business Premium licensing already covers the sensitivity labelling, encrypted email and DLP the Essentials ask for.