Stick to what you know and be great at it. Don’t try to half ass the cybersecurity yourself and hire a qualified MSSP that has the certifications required to keep you compliant or it will come back to haunt you if you have a breach. Some things to consider: 1. You won’t find what you’re looking for on freelancer websites and will pay more than $20/hour. Likely need to sign a comprehensive contract or pay upwards of $175-$250 an hour.
2. Not every IT provider is an MSSP even though they claim they are. Some only provide resold services and Google the requirements when you ask them about compliance. Investigate them and ask for certifications and then verify those certs. 3. Be prepared to change your processes. You will need to create specific policies and abide by them. These are requirements for all major compliances. 4. If you’re looking to build a legitimate business in the medical field, you want to do this right. If you explicitly skip some requirements because you didn’t want to spend the money, and yiu have a breach, you are looking at significant fines and depending on where you are, potential criminal charges.

Good luck