Healthcare
Networks with no single point of failure, isolated medical devices and backups that actually restore, for hospitals, clinics and labs.

What makes this sector hard
- When the HIS goes down, nurses go back to paper, medication rounds slow down and patients wait longer.
- Patient records are the most sensitive personal data there is, and hospitals worldwide are ransomware targets because they can't afford long downtime.
- Ultrasound machines, lab analysers and similar devices often run old Windows that the manufacturer won't let you patch.
- X-ray, CT and ultrasound images are large and pile up every year. Storage sized for today can be full in two years.
- Pharmacy, theatres and the maternity ward need a record of who went in and when.
Reference IT design
A hospital can't close for the weekend for maintenance. Everything below starts from one question: if this device fails at 2 a.m., does the ward keep working?
A network with no single point of failure
- Redundant core switches and dual uplinks to every floor, on separate cable paths where the building allows. Fiber between buildings.
- Dual-ISP internet for cloud systems, teleconsultation and payments.
- Enterprise Wi-Fi designed for smooth roaming, because nurse tablets and computers-on-wheels never stop moving. Separate SSIDs for patients and visitors.
Isolate the medical devices
A device you can't patch isn't a problem if it can't talk to anything except the server it needs.
- Separate VLANs/zones for HIS/EMR, medical devices, PACS, staff, guests, cameras and building systems.
- Next-generation firewalls between zones. The ultrasound can send images to PACS, but it can't reach the internet or the accounts PC.
- NAC to check devices before they connect and push unknown ones into a quarantine VLAN.
- EDR on every machine that can take it, MFA for EMR access from outside the hospital, email security, and training for staff, night shift included.
Servers, storage and backup
- Virtualization or HCI for HIS, lab and finance systems.
- PACS storage sized from daily study volume and retention period, with a plan for adding disks.
- Backups with an offline or immutable copy. Test a full HIS restore at least once a year and write down how many hours it took.
Communications
- IP-PBX integrated with nurse call and internal emergency numbers.
- Public address for paging and emergencies; digital signage for outpatient queues.
- Video conferencing for remote consultation between hospitals.
Security and environment
- IP CCTV at entrances, the emergency department and pharmacy. Never in examination rooms or patient rooms.
- Access control for pharmacy, theatres and the server room.
- IoT monitoring of drug and vaccine fridges (typically 2–8 °C), alerting a phone before stock is lost.
- UPS for network and servers, sized to bridge to the hospital generator. Fire alarm throughout.
Every installation is planned with the clinical team so emergency and theatre areas aren't disrupted. In patient areas our team follows the hospital's infection-control rules.
If you're not sure your HIS backup would actually restore, let us test it on a separate machine. Better to find out now than on the day you need it.
Send us a floor plan or a few photos of the site
We’ll come back with a few questions, then a first design. The first consultation is free, in Lao, Thai or English, on WhatsApp or our Facebook page.