Shared devices in residences
One tablet, five staff, one password taped to the back. Shared devices need individual sign in, the right access for each role, and a plan for the day a device goes missing.
Human Services & Care Agencies
Technology that keeps up with a day in the field
A caseworker is in a residence at 8:00 AM with a shared tablet. A program director is getting ready for a state visit. A new direct support worker started Monday and still cannot sign in. Your day does not wait for technology.
We help New York human services and care agencies of about 20 to 250 users, including those licensed or funded by OPWDD, OMH, and OASAS. The technology has to fit residences, day programs, offices, and the road between them.
What we see
Three things that slow a care agency down
Turnover and onboarding
People start and leave every month. Access that lingers is a risk. Access that arrives late is a missed shift. Both need a written process and a person who owns it.
Audits and records
An auditor, a funder, or an insurer will ask what protects your systems and how you know. The answer should be a record you can hand over, not a search through old email.
What changes
What a normal week looks like after
- BeforeStaff share logins because getting their own takes too long.AfterEvery person has their own sign in on the first day, on every device they use.
- BeforeA departure is remembered weeks later, and the account is still open.AfterDepartures follow a checklist, and access closes on the last day.
- BeforeThe audit binder is a scramble.AfterControl records are kept current and ready to hand over.
These are illustrative examples of the patterns we see, not client stories.
Standards
Built to CIS Controls v8 and NIST CSF 2.0.
Security work is built to CIS Controls v8 and NIST CSF 2.0. The evidence we keep can support HIPAA, the NY SHIELD Act, OPWDD expectations, and cyber insurance questions. Board reporting comes in plain language on the schedule in your agreement.
- CIS Controls v8
- NIST CSF 2.0
- HIPAA
- NY SHIELD Act
- 42 CFR Part 2
- OPWDD
- Cyber insurance
Where our responsibility stops
We support the technology around your approved clinical, case management, and electronic visit verification (EVV) systems, such as Therap. We do not manage clinical or program records, document services, verify visits, make care decisions, or take over the application vendor’s job. Your agency and its vendors keep those responsibilities.
Next step
Start with the site that worries you most
One residence, one program, or the whole agency. We will look at how the day really runs and give you one page of priorities.
Most often we start with Managed IT Services, Cybersecurity & Resilience, or Technology Leadership.
Have a question we have not answered here? See the FAQ.