HIA Ready — Essentials

HIA Ready — Essentials

Per user, per month. The working baseline for a clinic that needs to meet its Health Information Act deadline without assembling the stack itself.

Licensing included

• Microsoft 365 Business Premium — two-factor authentication, Conditional Access, Intune device configuration, Purview sensitivity labelling and encrypted email (measures A.8, A.12, B.7, B.8, B.10)
• Bitdefender GravityZone endpoint protection — auto-updating signatures, on-access scanning (measure A.2)
• Acronis Cyber Protect workstation backup, 500GB, stored separately from the live environment (measure A.13)
• Acronis Backup for Microsoft 365 — the alternative form of cloud backup the Essentials specifically ask for (measure A.14)
• Barracuda Email Protection — attachments and phishing (measure A.4)

Managed service included

• Patch management across operating systems and applications (measure A.1)
• Live hardware and software asset inventory, with end-of-support flagging (measures A.15–A.18)
• Account and access administration against your approval process (measures A.5–A.7)
• Regular vulnerability reporting — the report MOH tells you to ask your IT provider for (measure C.3.2)
• Helpdesk and remote support

What this does not cover

Essentials does not include 24/7 monitoring. If an incident starts outside working hours, nobody is watching — which makes the two-hour MOH notification window difficult to meet. If that matters to you, see HIA Ready — Complete.

It also assumes the policies and plans already exist. If they do not, start with HIA Compliance Assessment & Setup.

Minimum commitment: 12 months. Priced per user, per month.

Founding client pricing. Components list at S$157 per user bought separately. Held at S$99 as a package for our first clinic engagements.

Full HIA compliance guide for Singapore clinics