What’s wrong with the default Microsoft 365 setup for a healthcare clinic?
Default settings are built for a general business environment. They prioritize ease of use over the stricter access controls and data protection requirements that come with handling patient health information under PHIPA.
Out of the box, Microsoft 365 allows broad external file sharing, doesn’t enforce multi-factor authentication, and doesn’t configure email encryption by default. For a healthcare clinic sharing patient referrals, lab results, or treatment notes, those are not compliant and risk serious legal issues in the event of a breach.
What does a properly configured M365 environment look like for a healthcare clinic?
The Joe Apps Microsoft 365 Setup Checklist
- Turn on MFA
- Restrict access to approved users
- Turn on email encryption
- Set up OneDrive permissions
- Set up SharePoint permissions
If you aren’t sure how to do anything on our checklist, Joe Apps configures all of this as part of our Microsoft 365 and cloud services support, built specifically for the data sensitivity and access control expectations of a clinical environment.
Get-A-Joe today! Call 1-866-563-2771 or contact us here.
