01 / About the two names on the door

For practice managers who'd rather read the security report than survive it.

Nakamura & Doyle is a two-person consultancy in Jamaica, NY. We look after dental and small healthcare practices: the machines, the people, and the paperwork that proves you did both.

Jamaica, NY · By appointment — book a call

Illustration of two consultants at a dental reception desk with a laptop and a clipboard

02 / How we got here

We started at the front desk, not the server closet.

Most small practices meet cybersecurity as a bill, a scare, or a forty-page PDF nobody opens. We wanted it to feel more like a good house call: someone arrives, listens, handles it, and leaves you with a clear page of what to do next.

So we built the firm around how a practice really runs. Appointment books come first. Chairs stay full. Your office manager gets a report in plain English, and your auditor gets the reasoning behind every line.

We keep the jargon at the door and bring the coffee order in our heads.

Every engagement is quoted in writing before we begin and invoiced once when it ends. Nothing renews itself, and nothing is billed by the hour.

03 / Who reads what

Nakamura takes the machines. Doyle takes the people.

Two sets of eyes land on every page of your report. Here is where each of us spends the morning we spend with you.

Desk 01 · Nakamura

The machines

Technical review, written so a non-technical reader can follow the reasoning.

Workstations, laptops and the imaging PC that never gets updated
Wi-Fi, the router your internet provider installed, and the guest network
The server closet, and whether anyone has restored a backup lately
Where patient data lives, and who holds the admin logins

Desk 02 · Doyle

The people

The human side of security, handled with patience and zero finger-wagging.

The phone calls that ask for “just the date of birth”
The fax, the shared inbox, and the convincing email from “the insurance carrier”
Live training and gentle simulated phishing, graded kindly
A one-page “pause and check” card for every desk

04 / House rules

Four things we do on every visit

We work around your appointment book

The walkthrough takes one morning or a long lunch hour. Nothing is switched off, restarted or taken home.

We never ask for patient records

The first call and the walkthrough don't need them. If a business associate agreement is called for, it is signed first.

We write for the lunch table

Findings are ranked high, medium and low, with the reasoning shown so a receptionist and an auditor can both follow it.

We say what a report can't do

No document makes a practice “HIPAA compliant.” We give you the documented risk analysis and a roadmap, and we're plain about the difference.

05 / The morning we spend with you

What a walkthrough actually looks like

If you have never had someone assess your office, this is the order of a typical visit. Expect coffee, a few questions, and a lot of notes taken quietly.

See the three engagements and their prices

Arrival
15 min
Hello at the front desk
We meet your practice manager first and ask how a Tuesday really runs.
Hour 1
Machines
Workstations and Wi-Fi
Quiet inventory of devices, logins and software, chair by chair, without interrupting a patient.
Hour 2
People
Front desk and phones
We watch how calls, faxes and email are handled, then talk through what we saw with the team.
Hour 3
Closet
Server and backups
Where the backups go, who can restore them, and when anyone last tried.
By day 10
Report
The written risk analysis
Delivered in plain English, with the reasoning shown and the fixes ranked.

06 / Come say hello

Twenty minutes, no charge, and a firm number by the end.

Tell us your headcount and the software your front desk opens first. We'll take it from there and quote the engagement in writing.

Book your 20-minute call or ring (646) 713-9991