Read the document before you start.

Purpose and scope

Northgate Dental has 18 staff at 1 site. This summary records the supplied IT setup and the decisions needed before its cyber-insurance renewal.

It supports a review with the practice manager. It does not certify compliance or confirm that an insurer will accept the controls described.

Systems in use

Microsoft 365 provides staff accounts and email. Staff use managed Windows computers. A business router and managed switches connect the office network.

Northgate IT Practice provides remote support through its management software. A separate cloud backup service covers Microsoft 365 data.

These descriptions come from the sample Intake, not an inspection. Backup coverage for dental applications, imaging and local files remains unconfirmed.

Responsibilities

The practice manager approves access requests, maintains the staff list and decides which business activities take priority during disruption.

Northgate IT Practice maintains the technical records and coordinates recovery. The practice manager owns policy approval and confirms that staff receive the approved policies.

Named contacts and after-hours numbers must be verified in the escalation contact sheet before this Pack is issued to staff.

If service is disrupted

Staff report the affected service and the time the problem began to the practice manager. The manager contacts Northgate IT Practice through the agreed support channel.

For suspected account compromise or a lost device, report promptly and follow the incident response policy. Do not delete messages or reset systems without technical direction.

The manager decides whether appointments can continue safely using the approved downtime procedure. Recovery order follows the business priorities recorded in the recovery plan.

Items to confirm before handover

• [To complete: named primary and after-hours contacts, support numbers and escalation order.]
• [To complete: dental application and imaging backup scope, retention and the date of the latest successful restore test.]
• [To complete: evidence of multi-factor authentication coverage, including privileged accounts and remote support access.]
• [To complete: approved recovery priorities, acceptable data loss and target recovery times.]

Unknown answers remain visible. Do not describe an unverified control as operating when answering an insurance or security questionnaire.

Approval and next review

The practice manager and Northgate IT Practice review the gaps together, update the supporting documents and record approval before handover.

Review this summary after material changes to staff, systems or suppliers, and before the next insurance renewal.

Approved by: [to complete: name and role]. Approval date: [to complete]. Next review: [to complete].