Clinic owner
Controls access and decisions. Approves quotes. Names a privacy lead. Accepts or declines risk.
How we work with your MSP
Keep the IT provider you trust. CyberHealth is an independent oversight layer. The practice owner invites or removes the MSP and approves access. The MSP sees only the assigned practice and findings relevant to its work.
Practice manager / privacy lead
Tracks actions, due dates, and evidence. Coordinates staff rules and consent workflows.
Current MSP
Uploads or confirms evidence, responds to findings, and carries out agreed remediation. Cannot change KCC’s independent conclusion or see other clients.
EMR vendor
Hosts or supports the EMR. Confirm in writing who backs up, who restores, and how fast.
KCC
Independent assessment, evidence review, and progress tracking. Optional managed IT only when requested — never a condition of the check.