IT Services for Healthcare Providers in Calgary

The Alberta Health Information Act requires custodians of health information to implement administrative, physical, and technical safeguards to protect health information. On the technical side, this includes encryption of stored and transmitted health data, access controls limiting who can view patient records, audit logging of access to health information, and data backup and recovery procedures. AltaCom configures and documents these technical safeguards and can provide compliance summaries for your health college or HIA compliance purposes.

AltaCom supports the IT infrastructure your EMR/EHR runs on — the servers, workstations, network, and backup systems. We work alongside your EMR vendor and understand the importance of uptime for patient-facing clinical systems. We coordinate with software vendors during updates and issues, and we ensure your backup systems capture EMR data at a frequency appropriate for clinical operations.

Under the HIA, healthcare custodians in Alberta must notify affected individuals and the Office of the Information and Privacy Commissioner (OIPC) when a privacy breach occurs. AltaCom's vCISO service includes a breach response plan specific to your practice — covering containment, investigation, notification, and remediation steps. If a breach occurs in a client's environment, our security team assists with forensic investigation and breach documentation.

AltaCom implements Microsoft Entra ID (Azure AD) for healthcare clients — providing role-based access control, multi-factor authentication on all clinical workstations and remote sessions, and automated user provisioning tied to your HR process. When staff leave, access is revoked across all systems within your defined timeframe. We also implement conditional access policies that restrict access to patient systems from unmanaged devices.