HIA Ready — Complete

HIA Ready — Complete

Per user, per month. Everything in Essentials, upgraded, plus the monitoring that makes MOH’s two-hour incident notification window realistic.

Everything in Essentials, with upgrades

• Microsoft 365 Business Premium, Acronis workstation and Microsoft 365 backup, as Essentials
• SentinelOne Complete in place of Bitdefender — behavioural detection and rollback, not signature matching alone
• Barracuda Email Protection Premium in place of Advanced
• Full managed IT: patching, asset inventory, access administration, vulnerability reporting, helpdesk

Plus managed security

• 24/7 threat monitoring — the requirement hiding inside the two-hour rule. You cannot assess an incident nobody has detected
• Incident response and containment, run against your documented plan (measures C.11–C.14)
• Monthly security posture reporting
• Annual security awareness training for all staff (measure C.1)
• Phishing simulation exercises
• Quarterly security reviews and self-assessment against your policies (measures C.6–C.8)

This is the tier we recommend for any practice contributing to NEHR, and for any clinic where a Friday-evening incident would go unnoticed until Monday.

Minimum commitment: 12 months. Priced per user, per month. Onboarding is quoted separately — see HIA Compliance Assessment & Setup.

Founding client pricing. Components list at S$292 per user bought separately. Held at S$179 as a package for our first clinic engagements.

Full HIA compliance guide for Singapore clinics