HIA Compliance Assessment & Setup

HIA Compliance Assessment & Setup

A one-off engagement that takes your clinic from “we know there’s a deadline” to a documented, evidenced position against MOH’s Cybersecurity and Data Security Essentials.

What we do

• Gap assessment across all thirteen measures against your actual environment, not a questionnaire
• Written gap report — what is covered, what is missing, and the order to fix it in
• Asset and account inventory built for you (measures A.5–A.7, A.15–A.18)
• Access approval process documented for joiners, leavers and role changes
• Data protection policies — retention, marking, transfer and disposal (Section B)
• Business continuity plan (measure C.10)
• Incident response plan built around the 2-hour MOH notification window (measures C.11–C.14)
• Vendor register recording where your health information sits and who is responsible for what

These are the measures with no product to buy, and they are consistently the ones clinics leave until last. They take the longest.

Typical duration: 3–4 weeks for a practice of up to 20 users. Larger or multi-site practices quoted separately.

Founding client pricing. Listed at S$3,500. Held at S$2,500 for our first clinic engagements.

Read the full HIA compliance guide for Singapore clinics, or talk to us first.