No Email Required · Instant Score

Dental IT Risk Self-Assessment.

Twenty-five yes/no questions covering the five places dental practices most often have gaps — backups, security, HIPAA, your PMS, and the network. You get an instant 0–100 score with a per-section breakdown. No email, no follow-up, nothing to download.

Progress
0/25
Section 1 of 5 Backups
Do you have nightly backups of your practice management system (Dentrix, Eaglesoft, Open Dental, Curve, etc.)?
Are your backups stored offsite (cloud or different physical location)?
Has anyone tested a full restore from your backup in the last 3 months?
Are your dental imaging files (X-rays, panoramics, intraoral) backed up separately?
Is your backup data encrypted at rest?
Section 2 of 5 Security
Is multi-factor authentication (MFA) enabled on your email (Microsoft 365 / Gmail)?
Does every workstation have current antivirus or EDR protection?
Are all user accounts unique (no shared logins or generic 'front desk' accounts)?
Are workstation hard drives encrypted (BitLocker or similar)?
Has staff received cybersecurity awareness training in the last 12 months?
Section 3 of 5 HIPAA
Do you have a current Business Associate Agreement (BAA) with your IT provider?
Has a documented HIPAA Risk Assessment been completed in the last 12 months?
Are PHI access logs reviewed at least monthly?
Do you have a documented incident response plan for a data breach?
Are workstations set to auto-lock after a period of inactivity?
Section 4 of 5 PMS & Software
Is your PMS server running on hardware less than 5 years old?
Are PMS software updates installed within 30 days of release?
Is your PMS database hosted on a dedicated server (not running on a workstation)?
Is imaging software properly integrated with the PMS (one chart, not two)?
Are user permissions in the PMS reviewed at least annually?
Section 5 of 5 Network
Do you have a business-grade firewall (not just an ISP-provided router)?
Are guest WiFi and clinical WiFi on separate networks (VLANs)?
Are network passwords changed when staff leaves the practice?
Does your network have a documented diagram kept up to date?
Do you have surge protection plus a UPS (battery backup) on the server?