01 / Cybersecurity house calls · Jamaica, NY
You look after patients; we look after what's written down about them. Fixed-fee risk assessments, front-desk phishing training and a plain-English list of fixes, all invoiced once per engagement.
02 / The two names on the door
Most security firms send a stranger with a scanner and a forty-page PDF. We would rather sit down with your office manager, learn how a Tuesday really runs, and then write you something your whole team can read over lunch.
Nakamura takes the machines: workstations, Wi-Fi, the server closet, the backup nobody has tested. Doyle takes the people: the phone calls, the fax, the very convincing email from “the insurance carrier.” One report arrives with both of our eyes on every page.
— N. & D., 17221 128Th Ave, Jamaica, NY
03 / The fee schedule
We quote from your headcount and number of sites, put the figure in writing, and that figure is what arrives on the invoice. Anything extra we turn up goes in the report, not onto the bill.
A HIPAA Security Rule risk assessment for practices up to 10 staff. Up to 25 staff: $3,640.
Phishing-resistance training for up to 15 people, built around the emails your team actually receives.
A remediation roadmap that turns findings into an ordered to-do list with an owner and a price on each line.
Chart Review + Punch List together
$3,590 — $265 less than booking them apart. Findings and fixes written as one document.
04 / Before we talk
Nothing here is homework. It simply lets us give you a firm number on the call itself.
Please don't send patient records ahead of time. The first call never needs them.
05 / How a month goes
The report should be something your office manager can read at lunch and act on by Friday.
— The Nakamura & Doyle house rule
We ask about headcount, software and who holds the keys. You get a fixed quote in writing within two business days.
A mutual confidentiality agreement, plus a business associate agreement if we'll be anywhere near patient data.
Workstations, Wi-Fi, front desk, server closet, backups. We work around your appointment book, never through it.
Plain English, ranked by what matters most, with the reasoning shown so an auditor and a receptionist can both follow it.
A live training session, then four weeks of gentle simulated phishing with a quiet score for each team.
Your roadmap: each fix, who owns it, what it costs and what to do first. We call at day 45 to see how it's going.
06 / Asked first, answered first
Yes. We quote from your headcount and number of locations after the first call, and that figure is the invoice. If we find more than expected, it goes into the report as a finding and not onto your bill.
No. The walkthrough takes one morning or a long lunch hour, and we step around patients and the schedule. Nothing is switched off, restarted or taken home.
The Security Rule asks every covered practice, of any size, for an accurate and thorough risk analysis. A five-person office gets a shorter, quicker version of the same document, priced accordingly.
Honestly, no single document does, and nobody can certify that for you. What you get is the documented risk analysis the rule expects, plus a roadmap showing what you're fixing and when. That's the paper trail a careful practice keeps.
Nothing recurring. There's no retainer and no auto-renewal. Call us for the next engagement, or just a quick question, whenever you like.
07 / Reach the desk
Hours are by appointment. Choose whichever door suits you: ring, write, or send the form and we'll answer by the next business day.
Ring us
(646) 713-9991Leave a message at any hour and we'll return the call to arrange a time that suits your schedule.
Where we work
Based in Jamaica, NY. We walk through practices in person nearby and work by video with anyone further afield.
Send a note
Write us
care@nakamuradoyle.comHours
By appointment — book a call.
The first call runs 20 minutes and costs nothing. We'll fit it around your clinic hours, not ours.
Paying us
One invoice per engagement, due net 14.