Medical · Dental · Allied health · Imaging

Managed IT for healthcare practices and clinics

Practice software, imaging and patient records all depend on reliable IT. We manage the workstations, practice servers, imaging storage, Microsoft 365, security and backup behind them, with support requests raised in Microsoft Teams.

Discuss Managed IT See what we manage
$Managed IT cost calculator
Clinician reviewing a chest CT on a dual-monitor imaging workstation with AI-assisted analysis
Tested backupsImmutable backups of practice systems, with restores tested and a restore order agreed with you
Secure patient dataMFA, endpoint protection and DLP on patient information in email, Teams and shared files
IT support in TeamsRequests raised and followed in Microsoft Teams, with SLA-driven response for critical, business-impacting issues
AI scribesAmbient scribing set up on clinicians’ devices and accounts, inside approved data boundaries
Sector focus

Practice IT across medical, dental, allied health and imaging

A GP clinic, a dental surgery, a physiotherapy practice and an imaging group run on very different technology, from the clinical system at reception to the PACS archive behind each scan, and we support single-site clinics and multi-site groups across all four.

Medical practices

GP · Specialists · Telehealth

GP and specialist practices need the clinical system, reception and telehealth working from the first appointment of the day to the last.

We look after everything around the clinical system, from devices and sign-in to the network, backup and security.

Best PracticeMedicalDirectorZedmedGenieTelehealthMicrosoft 365
What we look after
  • Reliable access to Best Practice, MedicalDirector, Genie, Zedmed or similar
  • Connectivity and certificates behind Healthlink, eRx and Medicare online services
  • Reception computers, printers, scanners and payment terminals
  • Telehealth and remote patient monitoring devices, with reliable audio and video
  • Locum and visiting specialist access, set up and removed as they come and go
  • Secure messaging and encrypted email for referrals and results
  • Backups with tested restores for clinical and practice data
Backup and restore

What comes back first if your systems go down

We put the plan in place with you, setting out which systems come back first after an outage or cyber incident, how quickly each one should be running again and how your team will confirm that it is. We test it on a regular schedule and update it as the practice changes.

The order follows the clinical day. Sign-in and the clinical system come back first, because nothing else works without them. Next come the rooms where patients are treated or scanned, and then anything that can wait until the afternoon.

Example planThree-surgery dental practice
Restore tested
OrderWhat comes back, and how you’ll knowTarget time
  1. 1
    Identity and Microsoft 365Staff can sign in, and email and Teams work
    1 hour
  2. 2
    Practice server and Dental4Windows databaseToday’s appointments and patient records open
    2 hours
  3. 3
    Surgery and imaging workstationsX-ray sensors and the OPG capture to the right patient
    4 hours
  4. 4
    Front desk and HICAPS terminalsPayments and claims go through
    4 hours
  5. 5
    Image archivePrior images open from every surgery
    Same day
Agreed withPractice managerRun byInlight ITTestedQuarterly
What we manage

The systems we look after day to day

Practice IT, from the front desk and consult rooms to the practice server and image archive.

Users and IT support

Clinicians, reception staff and locums raise requests in Microsoft Teams and follow them there, and AI-assisted triage routes each one to the right engineer. When clinical access is down, it's a P1. Under our SLA-driven support model, the response target for a P1 incident is under 15 minutes.

Microsoft 365 and identity

Microsoft 365 and Entra ID run with MFA, Conditional Access and role-based permissions, including the shared mailboxes reception, referrals and results depend on. Health providers report more breaches to the OAIC than any other sector, so we set up data loss prevention (DLP) for patient information in email, Teams and documents.

Computers and devices

Consult-room, surgery and reception computers, imaging workstations, and the laptops, tablets and phones practitioners carry between sites. Devices are managed to one standard, with endpoint protection, encryption and patching scheduled outside clinic hours.

Cloud, infrastructure and networks

Servers, storage, private cloud and Azure for practice, clinical and imaging systems, sized for growing image archives, like the Nutanix private cloud we built for a multi-site healthcare group. Firewalls, Wi-Fi and SD-WAN connect every site, with medical and connected devices segmented from general traffic.

Backup and recovery

Immutable backups across Microsoft 365, servers, practice databases and image archives, with alerts reviewed and restores tested. Systems are restored in the order clinical services need them back, so the practice knows what returns first and how long it takes.

Vendors and clinical software

Clinical and dental software, imaging systems, Healthlink, My Health Record and telehealth all run on your IT. We manage the devices, access, certificates and connectivity they rely on, including those behind Medicare online services, and coordinate with each vendor.

Cybersecurity and patient data

Identity, endpoint and email security, patching and privileged access are part of the service, with Essential Eight-aligned controls and managed detection and response where patient data warrants it. We keep the evidence RACGP accreditation, My Health Record and cyber insurers ask for.

Copilot, AI and automation

Before Copilot reaches patient correspondence, we review SharePoint, Teams and mailbox permissions, then implement and support it inside those boundaries. For AI scribes, we set up the devices, access and data boundaries around the tool you choose, and we build AI agents and automation for administrative work.

Platforms we operate
MicrosoftFortinetCiscoSentinelOneProofpointNakivoIBMLenovo
Common questions

Questions we get asked

Do you manage clinical software like Best Practice, Dental4Windows, Cliniko or PACS?
We manage what those systems run on: devices, access, Microsoft 365, servers, networks, backup and security. Configuration inside the clinical application stays with its vendor. When an issue crosses between the two, we carry it through with them.
How much does Managed IT cost for a healthcare provider?
The price depends on users, sites, the technology being managed and security requirements. Microsoft licensing, hardware and project work are identified separately. Use our Managed IT cost calculator for an indicative estimate.
What is your response time when clinical access goes down?
A P1 incident is a critical, business-impacting issue such as a site outage, a cyber incident or clinicians unable to access a business-critical system. Under our SLA-driven support model, the response target for a P1 incident is under 15 minutes.
Can you work alongside our internal IT team?
Yes. Larger practices and healthcare groups often have internal IT. Co-managed IT adds depth across Microsoft 365, infrastructure, networks, cybersecurity, backup and escalation without duplicating what the internal team already handles.
How does onboarding work for a practice?
We start by documenting your environment: access, clinical and practice systems, vendors, security controls and any open issues. We then bring each area under management in stages, beginning with monitoring and backup, and work around clinic hours.
Does Share by Default affect us?
Pathology and diagnostic imaging reports are now uploaded to My Health Record by default. For most practices, that means more reports arriving through My Health Record. We make sure the access, certificates and connectivity behind it are in place and work with your software vendor on the setup.
What IT evidence do RACGP accreditation and cyber insurers ask for?
Accreditation assessors look for evidence that patient information is protected: a team member responsible for IT security, current antivirus and patching, regular backups with tested restores, controlled access to the clinical system and a plan for outages and breaches. These sit under the information security criterion of the RACGP Standards. Cyber insurers usually ask whether MFA is on every account, backups are immutable or held offline, devices have endpoint detection and response, and patches are applied promptly. We keep that evidence up to date, so accreditation and insurance renewals can be answered from records.
How should a dental practice back up its practice management software?
Back up the practice database using the method the software vendor supports, so the copy is consistent, and back up the server as a whole as well. Keep at least one copy immutable or off site so ransomware can’t reach it, and back up the imaging archive separately, because X-ray, OPG and 3D scan files grow quickly. Then test it: restore the database to a separate machine and check that the day’s appointments and patient records open. We run those restore tests on a schedule and record the results.
Are AI scribes safe to use with patient information?
They can be, with the right setup and clinical oversight. Before choosing a tool, check where recordings and notes are stored and processed, how long they are kept and whether they are used to train the vendor’s models. Ahpra’s guidance expects practitioners to get patient consent, review each note before it goes into the record and remain responsible for it. On the IT side, we set the scribe up on managed devices with MFA, limit it to approved accounts and keep its data inside the boundaries the practice has agreed.
What do we have to do after a data breach?
Health service providers are covered by the Notifiable Data Breaches scheme whatever their turnover. If patient information is lost or accessed without authorisation, the practice must assess the incident within 30 days and notify the OAIC and affected patients if it is likely to cause serious harm. Businesses with annual turnover above $3 million must also report any ransomware payment to the Australian Signals Directorate within 72 hours. Our incident plans cover containment, evidence and these notifications, so the practice manager has a clear plan to follow on the day.
What reporting and reviews do we get?
You can check the health of your practice systems at any time through your support portal, and you get a monthly snapshot of support, security and backup activity. Each quarter we meet to look ahead at new rooms, sites or clinicians, workstation and server replacements, imaging storage growth, licensing and the evidence accreditation and insurers will ask for, so upgrades can be budgeted ahead of time. The reporting and meeting rhythm is set to suit your practice.
Related services

Explore the services we provide

Next step

IT that holds up through the clinical day

We’ll review how your practice systems are backed up, secured and supported, and where AI scribes fit.

Discuss Managed ITCalculate Managed IT cost

Prefer email? contact@inlightit.com.au