Is Your Practice Actually Protected?

Moving or opening a dental office? Put IT in the buildout plan, not after

Every dental buildout budget has line items for cabinetry, chairs, and imaging. Almost none has a real line item for the nervous system of the practice — the network, the server closet, the cabling, the firewall — because IT is treated as something you “set up” the week before opening, like the coffee maker.

Then the practice opens, and the schedule, the charts, the imaging, the payments, and the phones all run through infrastructure that was an afterthought. Shawn Lamb, a Technology Consultant at Advantage Technologies — a managed IT provider that has worked exclusively in dental for 25 years, with roughly 800 practices and zero breaches in company history — joined us on the Dentelligentsia podcast, and her stories make the case better than any budget spreadsheet. Here’s why IT belongs in the construction conversation, and in every practice purchase.

The walls are open exactly once

Network cabling, access-point placement, the server room’s location and cooling, camera and phone wiring — all of it is cheap while the studs are exposed and expensive forever after. Planning IT with the buildout also means the security architecture arrives on day one instead of being retrofitted around bad habits.

Start with the device Lamb finds missing most often: “You’re supposed to have a physical firewall under HIPAA. Fifty percent of the offices I assess do not — and they don’t even know they’re supposed to.” Half. Not half of sloppy practices — half of everyone she audits. A buildout planned with a dental-specific IT partner opens with enterprise-grade firewall, switching, and wireless as part of the walls, not bolted on after the first scare.

What the stakes actually are

The scare is worth describing precisely, because owners consistently misjudge it. The attack doesn’t announce itself; it looks like being helpful. “It’s an email that looks like it came from Amazon, somebody clicks the link trying to be helpful — and that’s how it starts.” Then: “Offices are down for 17 business days if they get hit. I don’t know anybody that can be down for 17 business days.” Add the ransom itself — “they’ll pay hundreds of thousands of dollars, and most of the time they don’t get their information back” — and the HIPAA notification letter to every patient you’ve ever seen.

And the small-office comfort blanket is exactly backward. “‘We’re just a small office — they’re not going to come for us.’ Really, you’re who they’re coming for. Because that’s what you think, and they know the way that you think.” Defense is mundane and knowable: the firewall, daily-verified backups, patched systems, and team training that costs about $5 a person — the click is the door.

Buying a practice? Audit the IT before you sign

Lamb’s advice for buyers belongs on every due-diligence checklist: get an IT assessment before closing — hers are complimentary — because inheriting a practice full of aging computers, an end-of-life operating system, and no security stack “can mean $40,000 you didn’t negotiate for.” That’s real money that belongs in the purchase price conversation, exactly like a roof at the end of its life would be in a building purchase. Her adjacent tip for owners planning to sell: modernize the IT five years out, not six months — same logic as every other capital improvement a buyer will inspect.

Two more habits worth stealing. Budget the refresh cycle: operating systems reach end-of-life on a roughly known schedule, which makes every fifth year an upgrade year — predictable if planned, a crisis if not. And watch for the normalized decay her favorite story captures: a hygienist who powered on her computer, hung the schedules, made coffee, changed into scrubs, and poured a second cup before it finished booting — twelve minutes, every morning, forever. “They don’t know that’s not normal.” Multiply twelve minutes by every workstation and every workday, and slow computers are a payroll expense.

As for who runs all this: the neighbor kid who set up his home computer is, in Lamb’s phrase, break-fix — paid by the hour to learn dental IT “while they YouTube it on their phone.” A managed dental-specific provider is a proactive partner with a stake in nothing breaking. When she shows owners the report of everything prevented and asks if they’d like the role back, “the answer I normally get is heck-to-the-nah.”

Hear the full conversation with Shawn Lamb of Advantage Technologies on the Dentelligentsia podcast — the full ransomware timeline, the HIPAA basics, and what a complimentary assessment covers.

Planning a buildout, a relocation, or a purchase where the infrastructure should be in the plan from day one? That team gets assembled early — and that’s our job. Tenants and buyers only — talk to us.

For more on our interview with Shawn Lamb, check out our article, “Is Your Practice Actually Protected From Ransomware? A Dental IT Specialist’s Checklist.”

And follow Shawn Lamb on Linked In or check out the Advantage Technologies website.