Should Doctors Offer Concierge IT Security Services?

Today, just for fun, I’m gonna start with a thesis and work my way back to see if you agree with its foundations. My conclusion: With the cost of IT security services climbing, the cost of care coordination rising and practice income in many cases remaining relatively level, group practices will have to change their business model substantially.

Specifically, though this may sound insane, I’m suggesting that they may have to begin charging patients for beyond-the-call-of-duty security efforts.

Of course, as we all know, practices are required to offer at least a minimal level of security protection as specified in rules like those in HIPAA. Necessary though it is, it’s a pricey exercise for many groups.

Even so, cold economics may push them to cut data protection further. Given that care coordination will be necessary to meet population health goals, and that quality monitoring and management are indispensable, they may see security as the most dispensable of these spending options.

As the need for care coordination staff, quality management and other necessities of value-based care rise, paying for IT security services will become almost impossible to pay for without borrowing from another source.

That source can come from an internal budgetary resource, such as money allocated for routine general expenses, or other overhead, such as salaries for existing staff members, neither of which is desirable. Of course, there’s also the possibility of obtaining a line of credit, but that’s arguably even worse for the future of the company.

But since no medical organization can go entirely without IT security protection, it will have to find the funds to pay for it somehow. Given that any of the possibilities discussed above will drain the practice and possibly cut its finances to the bone, but something will have to give.

At this point, many practices decide to sell their group to a hospital or health system. That’s certainly a legitimate way of taking on unmanageable levels of overhead and getting access to far more infrastructure options and financial resources.

But if that’s not the direction you want to take, here’s off-ball idea for recapturing some IT security revenue: concierge security services.

While every patient’s data needs to be protected, obviously, you could offer concierge security patients access to extra layers of security attentiveness, such as a private IT staff or to answer any data privacy and security questions they might have about the practice, hospital where they are seen or other entity.

Toss in a special “security report” (in all candor, probably info they could’ve read in any trade magazine), personalized to patient needs, and a free zip drive with secured copies of their data and you’ll have them hooked.

If this worked, and I’m not suggesting that it necessarily would, it could help carry the cost of mundane IT security services. What do you think? Would this model have a chance?

About the author

Anne Zieger

Anne Zieger

Anne Zieger is a healthcare journalist who has written about the industry for 30 years. Her work has appeared in all of the leading healthcare industry publications, and she's served as editor in chief of several healthcare B2B sites.


  • Anne,
    Interesting idea, but I hope we never reach this point. The reality in most companies is that this type of security just gets rolled into the cost of the services they provide. The challenge in healthcare is that they don’t really control what they get paid for the services they provide. The insurance companies often do and so they can’t just raise their prices to cover security. It’s a challenge, but I think most healthcare organizations are going to have to invest in security without passing that cost on to the patient. It’s just the cost of doing business.

  • I like Anne’s idea. It is what drives IT Enterprise Help Desks. IT Enterprise Help Desks are concierge services, not specialty services to the individuals. We like to think that we are more than technicians. Concierge services are not expensive at all. My good friend Matthew Tauber can add a lot of value to this conversation.

Click here to post a comment