This is what lands in your inbox.

Arch Network Services Cyber Readiness Snapshot

Prepared for Riverbend Dental (a made-up practice) November 2, 2026

Cyber hygiene: Key protections are missing. The business is an easy target today. (Includes your domain checks: 55/100.)

Insurance readiness: Key controls are missing. Many insurers would decline or limit cover until they are fixed. (Held at 40 because insurers require a second sign-in step on email (partly in place); monitored protection on every computer (partly in place); daily backups kept away from the office (partly in place); a backup copy ransomware cannot reach (not sure yet).)

Industry safeguards: Much of what your industry's rules expect is missing. A breach now would be hard to defend.

Detail: Basic: core questions only.

Fix these first

1. Needs checking. Insurers ask about this. Keep one backup copy that ransomware cannot reach: offline, immutable or behind separate credentials. Attackers delete reachable backups first.
2. Insurers ask about this. Turn on a second sign-in step for every mailbox. It stops most account takeovers, and almost every cyber insurer asks about it.
3. Insurers ask about this. Back up daily with at least one copy away from the office. Without it, a fire, theft or ransomware attack can end the business.

Also worth looking at

• Put endpoint detection and response (EDR) on every computer, with someone watching the alerts. Insurers increasingly require it.
• Test a restore at least once a year. Many businesses learn their backups do not work on the day they need them.
• Know your breach-notice duties before you need them: North Carolina's law covers any business holding its residents' personal data. (not sure)
• Complete a HIPAA risk analysis. A missing one is the most common finding in HIPAA reviews.
• Write your HIPAA security policies down and review them once a year.
• Keep and review access logs for systems holding patient information. (not sure)
• Write a one-page incident plan: who to call (IT, insurer, attorney), what to unplug, who tells clients. Walk through it once a year.
• Remove administrator rights from everyday accounts. Malware gets whatever rights the person running it has.
• Replace or upgrade systems that no longer get security updates. Their weaknesses are public and never fixed.
• Turn on disk encryption on every laptop. A lost encrypted laptop is an inconvenience; an unencrypted one can be a reportable breach.
• Confirm every change to payment or bank details by calling a number you already had. Payment-change fraud is one of the costliest small-business losses.
• Train staff at least yearly and send practice phishing emails. Most attacks start with a person clicking a link.
• Add advanced email filtering in front of your mailboxes. It catches phishing and malicious attachments the built-in filter misses.
• Move business passwords into a company password manager, so they are strong, unique and can be taken back when someone leaves.
• Shut off a leaver's accounts the same day, from a written checklist. Old accounts are a quiet way back in.
• List where personal data lives. You cannot protect, or report on, what you cannot find.
• Get business associate agreements in place with every vendor that can touch patient information.
• Have updates installed centrally and checked every month. Unpatched computers are one of the most common ways in.
• Use a business firewall with active security services. An internet provider's router is not built to keep attackers out.

Your domain: riverbend-dental.example (55/100)

From public records only, on November 2, 2026. Nothing was scanned.

This Snapshot is a preliminary indicator based on your own answers and public records. It is not an audit, a certification of compliance, legal advice or an insurance determination. Arch Network Services prepares businesses for cyber insurance but does not sell or underwrite it. A full Security Assessment, run with your written authorization, verifies these answers.