CVServicesIT for medical practices
IT for medical practices and MVZ
When the practice software does not start in the morning, consulting hours stop. I make sure your practice IT runs reliably, that your data can be restored and that you know what to do when something goes wrong. For single practices, group practices and MVZ with several locations.
Or call me: +49 156 78 737 565
Where practices often stand
- A PC or the server fails during consulting hours, and nobody knows how long it will take.
- There is a backup, but nobody has ever tried a restore.
- Worry about ransomware grows with every practice that gets hit.
- Doctors want to look at findings from home, securely and without detours.
- Each location has its own IT, and nobody has an overview of all of them.
The IT security guideline
Under § 390 SGB V, medical and psychotherapy practices in Germany have to follow the IT security guideline of the KBV, the national association of statutory health insurance physicians. The revised version has been in force since 1 April 2025. Which requirements apply depends on the size of the practice, measured by the number of people who regularly process data. The thresholds are up to five, six to twenty, and more than twenty people.
The guideline does not require a certified service provider. What counts is that the measures are in place and documented. The current version is published by the KBV (in German).
What I do
- An inventory of all devices, programs and accounts, with a list of risks by urgency.
- Backups following the 3-2-1 rule, with one copy that cannot be changed, and regular restore tests.
- Separate networks for the practice, medical devices and guests, so one infected device cannot reach everything.
- Secure remote access over VPN for doctors and service providers.
- Monitoring and updates, so full disks and outdated systems are noticed before they get in the way.
- An emergency plan and documentation that also serves the guideline and your insurer.
The vendor of your practice management software and your telematics provider stay responsible for their systems. I work with both and take care of everything in between and underneath.
How it works
- First callfreeBy video or phone. You describe the situation, I ask questions.
- AssessmentSystems, dependencies and risks, written down.
- PlanTarget picture and steps, with priorities and effort.
- ImplementationStep by step, without disrupting daily operations.
- Operations and handoverDocumented, tested and handed over to you or your team.
Why work with me
I have worked in software since 2004. Today I lead infrastructure and DevOps at hessnatur; before that I was head of platform infrastructure at Calida Group Digital. So I know both sides, the code that gets shipped and the platform it runs on.
For Nun Pirat, an app for learning Arabic, I built the whole platform, with Kubernetes, shared pipeline templates and monitoring across everything. The case study shows how it is put together. From the first assessment to the handover you deal with the same person. More about me in the CV.
Related
Frequently asked questions
Do you replace our current IT provider?
Not necessarily. It often makes sense for your provider to keep handling the day to day while I build and document the concept, the backups and the network. If you have no provider, we discuss in the first call what I take on myself.
What does the IT security guideline require of our practice?
That depends on the size of the practice. The KBV guideline under § 390 SGB V sets requirements by the number of people who regularly process data. In the assessment I compare where you stand with the requirements for your practice size.
Do you also look after the telematics infrastructure?
The connector and the TI services are looked after by your telematics provider. I make sure the network, the computers and remote access are set up so that the TI runs reliably, and I agree changes with the provider.
What happens if nothing works in the morning?
That is what the emergency plan is for. It says whom you call, what your team can check themselves and how the practice keeps working without individual systems. How I can be reached in an emergency is agreed in writing.
Do you also work for MVZ with several locations?
Yes. Then the work is about connecting the locations securely, sharing central services and monitoring everything in one place. Each location keeps working even if the connection to the others drops.
Let's talk about your setup
In a free first call we look at where you stand and what the next sensible step would be.