When a front-desk computer cannot open the appointment schedule, a practice manager needs to know who owns the next step. A simple handoff record connects the computer, network, staff account, and application vendor so the office can ask the right person for help without repeating the story.
Map the tasks the front desk needs to complete
List the everyday tasks that depend on technology: signing into the computer, viewing the schedule, checking in patients, printing forms, taking calls, and opening the approved billing or practice application. Record which device, account, application, and vendor each task depends on.
Agree who handles office computers and email, and who handles practice software. Your IT provider may coordinate with the software company, but each needs a clear responsibility. Decide who takes the lead before an interruption occurs.
Write down who takes the first call
Use this illustrative ownership table as a starting point. Confirm the responsibilities and service hours with the providers actually supporting your practice; these are questions to resolve, not a diagnosis of any particular outage.
| Observed problem | First coordination contact | Useful detail |
|---|---|---|
| Workstation cannot sign in | Named device / account support provider | Device name and redacted error |
| Several desks cannot reach the application | Named IT coordinator and application vendor | Affected desks and time first noticed |
| Practice application reports an error | Application vendor, with IT coordination | Application version and vendor case number |
| Printing fails at one desk | Named computer / printer support provider | Printer name and scope of the failure |
Send a useful handoff, without patient information
Record the time, affected device names, application name, exact error with sensitive details removed, and whether one computer or several are affected. Include the vendor case number and the person coordinating the response. Those details let the next provider continue the investigation instead of starting again.
Use an approved support channel. Keep patient names, charts, appointment screenshots, passwords, and other sensitive content out of ordinary email or a public contact form. If a provider needs access to sensitive data, the practice should resolve the scope and approved access method before sharing it.
Make vendor access an explicit decision
Before a remote session, confirm the vendor’s identity through the practice’s established contact route. Record who authorized the session, the purpose, affected systems, access method, and responsible staff member. Ask which permissions are needed and whether the access will remain after the session.
Maintain an inventory of approved remote-support tools and access owners. Review continuing access when staff or vendors change. CISA’s guidance emphasizes auditing remote-access software and limiting permissions; apply those principles with the providers who understand the practice’s actual environment.
Check the fallback before the front desk needs it
Ask what work can continue if the usual computer is unavailable, which approved spare you can use and who checks that the software and printer work. A spare is only useful when staff can sign in and use the tools they need.
Document where important information is stored, what the application vendor protects, what the practice or IT provider backs up, and who can demonstrate a recovery. Agree on a supervised test with the relevant vendor and practice staff. Avoid making application, imaging, or clinical-device changes outside the vendor’s supported procedure.
Leave the meeting with four named owners
- A practice manager who approves support access and office priorities.
- An IT coordinator who owns devices, accounts, and provider handoffs.
- A confirmed software-support contact and a way to get urgent help.
- An owner for the fallback and recovery test, with the next review date.
This is an office-technology coordination checklist, not a HIPAA risk analysis or a clinical downtime protocol. See French Broad IT’s IT support for medical and dental practices in Western North Carolina for the service scope.
Further reading
CISA and partners: #StopRansomware Guide covers remote-access controls, permissions, preparation, and recovery. Use it alongside your application vendors’ current documentation.