Insights · Field Notes for Mission-Driven Leaders

Plain-English technology guidance, published weekly.

No jargon, no fear-mongering — practical answers to the questions nonprofit executives, clinical directors, and school administrators are actually asking. New post every week.

Featured · Schools · Back-to-School

The first week of school is phishing season — and parents are the target too

New staff, new families, new routines, and a flood of legitimate school emails asking people to click and pay. Attackers know exactly when your community is easiest to fool.

Read the post →
Medical & Dental

Your practice has more business associates than you think — and each one is a door

Every vendor touching patient data is a business associate, and their weakest control becomes yours.

5 min read Behavioral Health

Telehealth is a clinical space. Is yours actually private?

The four places telehealth privacy quietly breaks — and what "configured correctly" actually means.

5 min read Nonprofits

Your board turns over every year. Does your access control?

Board members and volunteers rotate constantly — but the accounts and file access you gave them rarely rotate with them.

5 min read Schools

Teachers change. Access shouldn't linger: the back-to-school account checklist

Every school year starts with staff arriving and departing — and most schools only manage half of that.

5 min read Medical & Dental

Ransomware loves small practices. Here are the five controls that take you off the list.

Criminals target medical and dental offices precisely because they're small, busy, and hold priceless data. Five controls stop the vast majority of attacks.

5 min read Cyber Insurance

Your cyber-insurance renewal is a security audit in disguise. Here's how to pass it.

The eight questions on every carrier questionnaire, and what "yes" actually requires — MFA, EDR, tested backups, and a current risk assessment.

6 min read Behavioral Health

The HIPAA risk assessment: what OCR asks for first, and why yours is probably overdue

A security risk analysis isn't optional — it's the first document requested in any audit or breach investigation. What one includes and how often to refresh it.

5 min read Nonprofits

The nonprofit software discounts you're probably not using

Most nonprofits leave four figures on the table every year in donated and discounted licensing. Where to look and what to ask for.

4 min read Schools

Planning summer technology projects: a checklist for schools

Break weeks are your only window for disruptive work. How to scope upgrades, migrations, and refreshes so day one of the school year just works.

6 min read Security

The phishing email your staff will click — and the 15-minute habit that stops it

Modern phishing doesn't look like a Nigerian prince. What today's attacks look like in a nonprofit inbox, and how to build resistance without shaming anyone.

4 min read Boards & Budgets

How to present a technology budget your board will approve

Boards don't reject IT spending — they reject IT spending they don't understand. A one-page framework that turns line items into risk decisions.

5 min read Switching Providers

What actually happens when you change IT companies (it's easier than you fear)

The number-one reason organizations stay with a provider they've outgrown is dread of the switch. Here's the 30-day playbook, step by step.

7 min read

WANT THESE IN YOUR INBOX? EVERY POST GOES OUT IN OUR MONTHLY BRIEFING — JOIN VIA THE CONTACT PAGE.

Find out where you stand — before someone else does.

Our free IT security assessment gives your leadership a plain-English report on your risks, your compliance gaps, and exactly what it would cost to fix them. No obligation, no jargon.

Request the free assessment