10 articles

Health IT & Security

Hospital cybersecurity, cloud infrastructure, disaster recovery, and IT governance.

Designing Role-Based Access That Survives an Audit

In most hospitals far too many people can see far too much, because roles were created during implementation and never revisited. Here is how to design roles from actual job function, handle emergency access, and run the reviews that keep it honest.

Gaurav Talwar

Jul 12, 2026 · 10 min read

Health IT & Security

Vendor Security Due Diligence Before You Sign an HMS Contract

Most hospital software contracts are evaluated on features and price, and the security questions get asked after the first incident. Twenty questions worth asking first, what a good answer looks like, and which claims are worth verifying rather than accepting.

Varun Deshpande

Jun 28, 2026 · 11 min read

Health IT & Security

NABH Digital Health Standards for HIS and EMR Procurement

What the NABH digital health standards for hospital information and EMR systems mean when you are buying software: what a vendor must demonstrate, how ABDM and security certifications fit, and how to write it into a tender.

Gaurav Talwar

Jun 14, 2026 · 11 min read

Health IT & Security

Hospital Network Segmentation and IoMT: A Reference Design

A reference VLAN design for clinical, imaging, medical device, administrative and guest traffic, with an honest account of where 802.1X stops working on legacy equipment and how to stage segmentation in a live hospital.

Ira Bhagat

May 31, 2026 · 11 min read

Health IT & Security

Health Data Localisation Rules for Indian Hospitals Explained

Where may Indian patient data legally live? This pulls the DPDP Act transfer provisions, the CERT-In log storage requirement and ABDM expectations into one answer, with guidance on cloud region choice and contract wording.

Gaurav Talwar

May 17, 2026 · 11 min read

Health IT & Security

Cloud vs On-Premise HMS: A Five-Year Total Cost Comparison

A transparent five-year cost comparison for hospital management software with every assumption stated: hardware refresh, power and cooling, connectivity, disaster recovery, staffing, licence models and the data residency constraint.

Gaurav Talwar

May 3, 2026 · 12 min read

Health IT & Security

RTO and RPO Tiering for Hospital Systems: A Practical Method

Not every hospital system needs a fifteen-minute recovery point. This is how to run the business impact analysis, tier HMS, PACS, LIS, billing and pharmacy honestly, cost each tier, and design a DR drill that proves the numbers.

Ira Bhagat

Apr 19, 2026 · 11 min read

Health IT & Security

Hospital Ransomware Readiness: A Hardening and Recovery Plan

What publicly reported Indian hospital incidents exposed, turned into a hardening plan: immutable backups, segmentation, privileged access control, patching around vendor constraints, tabletop exercises and the recovery sequence.

Varun Deshpande

Apr 5, 2026 · 12 min read

Health IT & Security

CERT-In Log Retention: 180 Days of Hospital System Logs

The 180-day rolling log retention obligation, applied to a real hospital estate: what to capture from HMS, PACS, LIS and the network, why clock synchronisation decides everything, how to size storage, and how to make the logs usable.

Ira Bhagat

Mar 22, 2026 · 11 min read

Health IT & Security

CERT-In Incident Reporting for Hospitals: The Six-Hour Clock

The CERT-In directions of April 2022 apply to hospitals, not only to IT companies. Here is what starts the six-hour reporting clock, which incidents are reportable, who owns the runbook, and what the report has to contain.

Varun Deshpande

Mar 8, 2026 · 11 min read