Locations / Round Rock, Texas
Microsoft 365 consulting for Round Rock organisations.
Round Rock is not a commuter town with a Dell campus attached. It has its own gravity: a global headquarters held here by a Chapter 380 agreement running to 2099, a semiconductor supply chain serving fabs across the state, and half a billion dollars of hospital construction underway inside the city limits. Identra configures Entra, Defender XDR and Purview for organisations that carry a real regulator, and delivers the evidence the regulator asks for.
- Service area
- Round Rock, Hutto, Georgetown, Williamson County
- Delivery mode
- Remote-first, on-site available
- License footprint
- M365 E3 or E5, GCC where required
- Delivery
- Fixed scope, fixed price
01 / What we configure
Four practice areas for Round Rock buyers.
- 01
Hospitals and the vendors serving them
Ascension Seton Williamson, Baylor Scott and White Round Rock, and St. David’s Round Rock are expanding at the same time, adding hundreds of beds and several hundred staff between them. That pulls in clinical vendors, staffing agencies and specialty practices, all of whom sign Business Associate Agreements. Identra configures HIPAA-aligned Conditional Access, PHI data loss prevention, and the six-year audit retention Texas expects.
HIPAAHB 300Business Associate - 02
Semiconductor supply chain
Round Rock hosts photomask production, equipment cleaning and coating, and gas and piping suppliers serving fabs run by other companies. These firms hold customer process data that is somebody else’s trade secret, which makes the tenant a supply-chain risk question rather than only an internal one. Identra configures Purview sensitivity labels, Insider Risk, and a departing-engineer workflow tied to HR.
Trade secretInsider RiskSupplier assurance - 03
Higher education (TAC 202)
Texas State University’s Round Rock Campus and its nursing school sit inside the city. Institutions of higher education are in scope for Texas Administrative Code Title 1 Chapter 202 and the DIR Security Controls Standards Catalog, and a nursing school also handles clinical PHI. Identra covers the Microsoft 365 portion of that assessment and the HIPAA overlap.
TAC 202DIR catalogClinical PHI - 04
City and school district (HB 3834)
Round Rock ISD is one of the largest employers in the city. Texas Government Code 2054.5191, added by House Bill 3834, requires annual DIR-certified cybersecurity training for local government and school district employees who use a computer for a quarter or more of their duties, certified each year by 31 August. Identra configures the Microsoft 365 controls that make that programme evidenced rather than asserted.
HB 3834Annual certificationLocal government
02 / What it looks like
Three Round Rock engagements.
Same Microsoft 365 platform, three different regulators asking.
IT Director at a Round Rock specialty practice
Situation. Practice grew alongside the hospital expansion and now signs Business Associate Agreements with two health systems. Staff use personal phones for on-call. No formal HIPAA evidence beyond a policy document.
Outcome. App protection policies on personal devices. PHI data loss prevention on mail and Teams. Six-year audit retention configured, with the Texas HB 300 training-record and 15-business-day record-delivery obligations documented alongside it.
Operations lead at a semiconductor supplier
Situation. Firm holds process data for several fab customers on the same tenant. A customer security questionnaire asked how data from different customers is separated and who can export it. No answer existed.
Outcome. Sensitivity labels applied per customer programme. Insider Risk policies on bulk download and departing users. Questionnaire answered from the tenant configuration rather than from intent.
Technology lead at a Williamson County public body
Situation. HB 3834 certification due by 31 August. Training was being tracked in a spreadsheet, and there was no way to show who had a computer role in the first place.
Outcome. Entra groups define who is in scope by role. Completion tracked against those groups. Certification supported by tenant data rather than a manual roll call.
03 / Frequently asked
What buyers ask first.
- Are you based in Round Rock?
- Identra operates remote-first across the United States. Engagements are delivered as remote configuration and evidence work, with on-site presence available for workshops and executive briefings when it helps. Most Round Rock customers do not need on-site work day to day.
- Does TAC 202 apply to the City of Round Rock or to Round Rock ISD?
- No, and this is a common misreading. Texas Administrative Code Title 1 Chapter 202 binds state agencies and institutions of higher education. Cities, counties and school districts are not in its scope. What does bind them is Texas Government Code 2054.5191, added by House Bill 3834, which requires annual DIR-certified cybersecurity training for employees and elected officials who use a computer for at least a quarter of their duties. Texas State University’s Round Rock Campus is in TAC 202 scope because it is a higher education institution.
- What does Texas HB 300 add to HIPAA?
- House Bill 300 sits on top of HIPAA for Covered Entities operating in Texas. It broadens the definition of a Covered Entity, requires electronic health records to be delivered within fifteen business days rather than the federal thirty, requires training within sixty days of hire and every two years after, and requires those training records to be kept for six years. The Microsoft 365 controls that satisfy HIPAA generally satisfy HB 300; the difference shows up in documentation and training evidence.
- We supply a semiconductor fab. What do customers usually ask for?
- The recurring questions are separation of one customer’s data from another’s, control over export and bulk download, and what happens when an engineer leaves. Those map to sensitivity labels, data loss prevention, Insider Risk policies and a leaver workflow. Answering them from configuration rather than from policy intent is what shortens a customer security review.
- What is the typical Round Rock engagement size?
- Most run eight to sixteen weeks. Healthcare and higher education sit at the longer end because the regulator scope adds time. Fixed scope, fixed price, no hourly bill-outs.
04 / Related
Where this fits.
Location
Microsoft 365 consulting Austin TX
Microsoft security consulting across Austin and the wider metro.
Industry
Healthcare Microsoft security
HIPAA, EHR integration and clinical device access for hospitals and medical groups.
Solution
Microsoft security consulting in Texas
TAC 202, DIR standards and HB 300 across Texas organisations.