Services · Fixed fee

Not A Retainer — Three Deliverables, Each Priced Once

Every Railyard Row engagement ends in something you can hold: a signed report, a completion record, a written plan. You read it first. Only then does an invoice follow.

Reserve a quiet half hour

Thirty minutes, no charge. Or call (650) 274-5766, weekdays 9am–5pm.

Kept in good order for
  • Primary care
  • Dental
  • Physical therapy
  • Behavioral health
Through-ticketTracks 01–03

Assessment, Training & Roadmap

Booked together, billed separately as each one lands.

$6,640Against $7,365
booked apart.
Track AThe three stopsWhat each one includes

Each Stop, Set Out In Full

Read the scope, the timing and the fee before a single call is booked.

HIPAA Security Risk Assessment

A dated, documented analysis of how electronic patient information moves through your clinic — scored, signed and written for a practice manager, not a lawyer. Delivered in about three weeks.

What we examine

  • Every workstation, tablet and shared drive
  • Each vendor with a login, from billing to the fax-to-email line
  • Backups, encryption and who holds the keys
  • Building access and device loss procedures

What you receive

  • Signed, dated risk analysis report
  • Scored risk register in plain sentences
  • A calendared date for the next review
Admit one practiceTrack 01

Risk Assessment

About three weeks to report.

$3,850Fixed fee.
Invoiced on delivery.

Phishing-Resilience Training

A forty-five-minute session at your reception desk or by video, then four weeks of simulated messages that teach your staff to pause before they click. Run twice, so the front desk is never left empty.

How it runs

  • Live session for up to fifteen staff
  • Two sittings, lunch hour or morning huddle
  • Four weeks of quiet simulated messages
  • Gentle reminders, never public scoreboards

What you receive

  • A completion record for every name
  • A one-page summary of who paused, and when
  • Extra cohorts at the same fee
Admit one cohortTrack 02

Phishing Training

Up to fifteen staff per cohort.

$1,275Per cohort.
Invoiced on records.

Written Remediation Roadmap

Findings turned into a calm, sequenced plan — what to mend first, who owns it, roughly what it costs — in language a practice manager can act on without a translator.

How it is built

  • Ordered by effort against risk
  • A named owner and a target date for each fix
  • Rough cost ranges, so budgeting is possible

What you receive

  • The roadmap, in writing
  • A direct briefing for your outside IT vendor
  • Thirty days of emailed answers

We assess and advise only. We never install or resell systems, which keeps every finding independent.

Admit one practiceTrack 03

Remediation Roadmap

Written in the week after findings.

$2,240Fixed fee.
Invoiced on delivery.
Track BTimetableAt a glance

The Timetable And The Fare

When each deliverable arrives, and when each invoice follows.

StopArrivesBest forFee
Risk AssessmentAbout three weeksNo current analysis, or a new system since the last one$3,850
Phishing TrainingSession within two weeks; simulations run fourFront desk and billing staff who open email all day$1,275
Remediation RoadmapWeek after findingsClinics that have findings but no plan to fix them$2,240
All threeAbout four weeksStarting from a blank page$6,640
The through-ticket

All Three Stops, One Itinerary

Book assessment, training and roadmap together and the fare drops by $725. You are still invoiced one deliverable at a time.

Book the itinerary
$6,640 $7,365 apart
  • Roadmap, on delivery$2,240
  • Training records, on delivery$1,275
  • Assessment report, on delivery$3,850
  • Bundle saving, applied across invoices−$725
Track CBefore the walk-throughCome prepared, lightly

What To Have Ready For The First Morning

None of this needs to be tidy. We would rather see the clinic as it truly runs.

Item one

A list of who logs in to what

Scheduling, billing, imaging, the patient portal. Names on a napkin will do.

Item two

Your last risk analysis, if one exists

Dated three years ago, or never written — either is a fine place to begin.

Item three

The contact for your outside IT

A vendor or a nephew. We will brief whoever keeps the machines running.

Your first departure

Tell Us The Practice. We’ll Name The Stop.

A thirty-minute call, weekdays 9am–5pm, at no charge. You describe the clinic; we say honestly where to begin — and whether you need us at all.

631 Ofarrell St Apt 1002, San Francisco, CA 94109 · On-site across San Francisco, video elsewhere.

Call (650) 274-5766 Write to the desk Prefer a note? Use the contact form