Quick Answers
Short, straight answers to the questions Texas practices and firms actually ask. Each one takes about two minutes to read. For the full treatment of a topic, every answer links to the deeper guide in our Learning Center. The library below grows as new questions come in; if yours is not here, call (972) 776-6366 or contact us.
Weather and continuity
How should a Houston-area practice prepare its IT for hurricane season?
Verify backups off-site, confirm the EMR failover plan, move phones to the cloud, and write down the downtime procedure before June 1.
How does a DFW practice keep running through a winter storm and grid failure?
Plan for multi-day power loss, not a snow day: remote EMR access, cloud phones, UPS protection, and a staff work-from-home drill.
The EMR is down. What do we do in the first 15 minutes?
Declare downtime early, switch to the paper kit, triage whether the failure is local or the vendor's, and get your IT partner working it while the clinic keeps seeing patients.
Texas rules
What does Texas HB 300 require beyond HIPAA?
HB 300 applies to more organizations than HIPAA, requires employee privacy training, and Texas breach law sets deadlines of 60 days to individuals and 30 days to the Attorney General for larger breaches.
Who does a Texas practice notify after a ransomware attack?
Insurer and counsel first, FBI early, OCR within 60 days if PHI was involved, the Texas AG within 30 days if 250 or more Texans are affected.
When does Texas require a PDMP check?
Before prescribing or dispensing opioids, benzodiazepines, barbiturates, or carisoprodol, Texas prescribers must check the state PDMP, and the check works best integrated into the EMR.
Costs and coverage
What does a HIPAA risk assessment cost in Texas?
It depends on practice size and scope; treat quoted figures as planning ranges, and judge any quote by whether it produces the documented analysis OCR actually asks for.
How fast can Galleon reach a practice in DFW or Houston?
Remote response starts within 15 minutes per SLA; on-site support dispatches from Richardson for DFW and from West Houston for the Houston metro.
What do cyber insurance carriers require at renewal now?
Current renewals expect MFA on email and remote access, monitored EDR on endpoints, tested and separated backups, and security training; inaccurate answers are the fastest route to a denied claim.
What should a North Texas practice put on UPS and surge protection?
Servers, network gear, and anything attached to clinical devices get real UPS protection; the battery's job is clean shutdown and riding out flickers, not running the office.