PracticeITsecurity,provablyhandled
A new Sekuvia Health module that guides the practice through practical cybersecurity: self-assessment, security score, measures, ready-made documents, an external security check, weekly monitoring, phishing simulation and team training — without jargon and without an in-house IT department.
Demo Practice
Security score
72
of 100
Check · ordinacija-demo.ba
Next check: in 7 days
Coming soon — the module is in development
Sekuvia Cyber Security grows out of Sekuvia's work on IT security for practices and is now being brought into Sekuvia Health as an optional module — enabled by licence, with no new installation. The functions described are the module's plan; we will announce the release date once it is ready. Institutions in the beta programme get it first.
Why IT security matters for small practices too
Nobody in the practice knows where to start with IT security.
A guided self-assessment in plain language shows where you stand in a few minutes — and what the first step is.
Policies, plans and records exist only in the IT technician's head.
Security policy, incident response plan and record of processing activities are created in one click, with versions.
A certificate expires or a dangerous port opens — and nobody notices.
Weekly external monitoring and an alert as soon as something changes or the risk rises.
One click on a fake e-mail can lock up the whole practice.
A harmless phishing simulation shows how resilient the team is — anonymously, without singling anyone out.
During an inspection or incident, evidence takes days to collect.
Score, documents, reports and monitoring history are ready as PDF — in one click.
The IT partner says everything is fine, but nobody can show it.
Sekuvia does not replace the IT partner — it gives them a clear task list and gives the practice proof the work is done.
What the module brings
Cyber check (self-assessment)
Guided questions on the practice's security, adapted to the size of the institution — basic and advanced requirements, no jargon.
Security score and history
A score from 0 to 100 with a transparent breakdown by area. Every assessment is kept, so progress is visible over time.
AI-assisted measures
A prioritised list of measures with effort estimate, responsible person, deadline and step-by-step instructions.
Documents in one click
Security policy, incident response plan and record of processing activities — updated when the score changes, with revision history.
External security check
A check of domain and e-mail without touching your systems: TLS certificate, security headers, DNS, SPF/DKIM/DMARC and open ports.
Weekly monitoring
Every location is checked automatically once a week. Changes and new risks arrive as alerts right away — with trend and evidence.
Early warning
A certificate about to expire, a new open port, missing e-mail protection or a falling score — notice before it becomes a problem.
Phishing simulation
Harmless test e-mails to the team. Results are anonymous and aggregated, and the report goes to the practice's control e-mail.
Team training
Material on basic security and AI literacy (Art. 4 EU AI Act) — each team member confirms reading, and the confirmations remain as evidence.
Multiple locations
Checks and monitoring for several domains of a polyclinic or associated practices at once, with a score and report per location.
Working with your IT partner
Reports are shared with the IT partner via a temporary link, and measures with deadlines go into the calendar (ICS).
Benchmarking
Anonymised comparison data from practices of the same size shows where you stand against the average.
An external check — without touching your systems
You enter the practice's domain or IP address and confirm you are entitled to have it checked. The system examines only what is visible from outside and runs no attacks. The report is clear even without IT knowledge — with concrete recommendations.
- Certificates and encryption (TLS)
- Website security headers (e.g. HSTS)
- DNS and e-mail protection: SPF, DKIM, DMARC
- Open ports and services (e.g. remote desktop)
The check is not a penetration test and does not replace antivirus, backup and firewall on your devices — it complements them with oversight and evidence.
Not once a year — every week
Automatic, weekly
The check runs in the background, with no manual follow-up.
Alert on change
A notification as soon as a new or higher risk appears.
Trend and evidence
A complete history of findings for documentation and inspection.
How it will work
- 01
Enable the module
The module is added to the licence of an existing Sekuvia Health installation — in a few minutes.
- 02
Complete the cyber check
Guided questions about the practice — the system calculates the security score right away.
- 03
Get measures and documents
Prioritised measures and ready-made documents — policy, incident plan, record of processing.
- 04
Check and monitor
Check the domain from outside and switch on weekly monitoring — progress on one screen.
IT partner or Sekuvia? Both — with clear roles
Your IT partner keeps the technology running. Sekuvia makes security obligations visible and provable.
| Traditional IT partner | Sekuvia Cyber Security | |
|---|---|---|
| Main goal | Technology works | Security provably in place |
| Way of working | Reactive — on failures and calls | Structured and guided, step by step |
| Documentation | Rare and inconsistent | Generated, consistent, versioned |
| Overview | "It works somehow" | Score shows status and gaps |
| Evidence at inspection | Painstakingly collected | One click — documents and reports |
| Up to date | Only when ordered | Weekly monitoring |
The framework behind the module
- BiH Law on Personal Data Protection — health data is a special category
- Alignment with the EU GDPR, on which the new BiH law is based
- Structure inspired by IT security guidelines for practices (e.g. Germany's KBV §75b) and EU NIS2
- AI literacy training under Art. 4 of the EU AI Act
The module does not touch patient data
Sekuvia Cyber Security works with data about the institution's IT — domains, measures, documents and team confirmations — not with patient records. Like all of Sekuvia Health, it runs on your institution's server. The security check only starts with your explicit consent.
Frequently asked questions
The module is in development. We do not promise a date until it is ready — institutions in the beta programme get it first, and we notify everyone else as soon as it is available.
Want Sekuvia Cyber Security among the first?
Get in touch — we will let you know as soon as the module is ready and show it using your practice as an example.