Technology leadership and IT you can trust.
Fractional CIO and HIPAA privacy & security leadership for healthcare organizations, and honest, fixed-price IT and security for growing businesses. Plain English, clear scope, no surprises.
- 34 years in IT
- 12+ years as a HIPAA Privacy Officer
- Former Fortune 500 IT Security Manager
- Michigan Ross MBA
Executive leadership, part-time
Fractional CIO and HIPAA privacy & security officer for nursing homes, home health, practices and healthcare startups.
See healthcare services →IT and security done right
Security, networks, Microsoft 365, servers and projects, with fixed pricing and nothing you don't need.
See business IT services →Regulators, insurers and boards expect an executive to own this.
Most healthcare organizations can't justify a full-time CIO or CISO. Your MSP keeps systems running, but nobody owns the risk analysis, the vendor contracts, the insurance questionnaire or the technology roadmap. That's the seat I fill, as someone who has held the HIPAA Privacy Officer role for more than 12 years.
Executive Technology Risk Briefing
45 minutes with your CEO or CFO, and a one-page summary of your top risks and quick wins.
Cyber-Insurance Readiness Check
Your renewal questionnaire and MFA, backup and endpoint controls reviewed, with a prioritized fix list before renewal.
IT Spend & Contract Review
Every IT, telecom, EHR and software contract in one place, with savings found, renewals flagged and a negotiation plan.
HIPAA Security Risk Analysis
A documented risk analysis and remediation roadmap, presented to leadership. It's the first thing regulators ask for.
Fractional CIO / Privacy & Security Officer
Your part-time technology and privacy executive: roadmap, vendors, policies, incident readiness and board reporting.
Simple, honest IT and security.
Security audits, networks, Microsoft 365 and day-to-day support for businesses that don't have an IT department, or have one that's stretched thin. Every project comes with a defined scope and a fixed price.
Security & Compliance
Risk assessments, multi-factor authentication, password policy, endpoint protection, spam filtering, backups and HIPAA-aware practices.
Networking & Wi-Fi
Firewalls, structured cabling, VLANs, guest networks, site-to-site VPNs and VoIP quality of service.
Cloud & Microsoft 365
Tenant hardening, conditional access, Intune and Defender, email security, data loss prevention and backups.
Servers & Storage
Windows and Linux servers, virtualization, NAS, backups and disaster recovery plans that are actually tested.
Projects & Migrations
Office builds and moves, software rollouts and Wi-Fi refreshes, scoped and fixed-price.
Support & Monitoring
An optional business-hours support plan: help desk, patching, device setup and uptime alerts.
You approve the work. You see every hour.
Free assessment
A 30–45 minute conversation about your environment, problems and goals. No sales deck.
Plain-English plan
A short written plan with a fixed price, approved by you before any work begins.
Deliver
The work gets done and documented, with findings your team, provider and leadership can act on.
Stay or go
Keep me on for ongoing leadership or support, or take the plan and run with it. Your choice.
Darrin Posta, founder
I've spent 34 years in IT, 21 of them in healthcare. For more than 12 years I've been Head of IT and the designated HIPAA Privacy Officer for a multi-site healthcare organization of about 2,000 people. Before that, I was IT Security Manager for a Fortune 500 retailer and led infrastructure teams at one of Michigan's largest hospital systems.
Through Trust IT Co., I bring that experience to organizations that need it without a full-time hire. I translate technology risk into plain business terms, recommend only what saves you money or reduces real risk, and say so when a project isn't worth doing.
- 12+ years as a designated HIPAA Privacy Officer
- Planned and delivered about $1M in infrastructure and security modernization
- Cut internet connectivity costs about 55% while improving uptime
- MBA, University of Michigan Ross School of Business · BS Mathematics, University of Michigan
Common questions
Do I need a monthly contract?
No. Most clients start with one fixed-price project. Ongoing support and fractional leadership are available if they make sense for you.
We already have an MSP or IT provider. Why would we need you?
Your provider runs the systems. I set direction, own the security and privacy program, and hold vendors accountable, including your provider. I work alongside them, not against them.
Will you sign a Business Associate Agreement?
Yes. Any work that may involve protected health information starts with a BAA.
Are you HIPAA certified?
There's no official government HIPAA certification for consultants. What I bring is more than 12 years in the HIPAA Privacy Officer role and HIPAA-aligned processes in every engagement.
Where do you work?
On-site across Ohio and Michigan, and remotely anywhere in the US. All work is done by me, in the US.
How quickly can you start?
Assessments usually happen within a week. Fixed-price projects typically start within two weeks of approval.
Book a free assessment.
Tell me a little about your organization and what's on your mind. I'll reply within one business day.
- Your top technology risks, in plain English
- Where you're likely overspending
- A clear next step, whether or not we work together
Prefer to talk? (419) 720-3950
or email darrin@trustitco.com