Hurricane IT Plan for South Florida Dental Offices: Events, Zones, People and the Reopening Gate

Mid-September, a Hollywood practice just east of U.S. 1. The cone has swung toward Broward, the hygienist who drives up from Kendall is asking about Monday, and the only person with the server's admin password left for Ocala last night.

That Thursday is not the time to write it. This page is built for the office manager of a single-site practice in Broward or Miami-Dade, from Miramar, Pembroke Pines and Coral Springs to Doral, Kendall and Coral Gables, with the owner as the person who signs off. It gives you three working tables: the South Florida events that break different parts of an office, a worksheet that maps every person and the office itself against the counties' own zones, and a gate list for reopening. Statewide storm checklists live in the Florida dental technology and cybersecurity guide; what follows is only what changes south of the Palm Beach line.

Why does a South Florida practice need its own storm plan for IT?

Because the risks here are specific and on record. Both counties sit in the Florida Building Code's High-Velocity Hurricane Zone, the season runs six months, and FPL's own releases show South Florida losing power to storms that did their worst damage elsewhere. A plan copied from Houston or the Carolinas misses surge zones, rain floods and outer bands.

Start with the calendar. NOAA's National Hurricane Center says "the official hurricane season for the Atlantic basin is from June 1 to November 30", puts the peak on September 10 and places most activity between mid-August and mid-October. For a dental office that means the plan is written in the slow weeks of spring and checked again before late August, when hygiene schedules are full and nobody wants to touch the server.

Then the building rules. Chapter 2 of the Florida Building Code, 8th edition (2023), draws the High-Velocity Hurricane Zone around exactly two counties: Broward and Miami-Dade. The IT consequence is small but real. A rooftop cellular antenna, a dish or a camera bolted to the wall is the landlord's and a licensed contractor's business; ask them what the HVHZ rules require before anyone mounts it. The network side of that decision is covered in our Miami dental network setup guide.

Then the utility record, in FPL's own words and dates:

• • Irma, 2017. FPL's release of Sept. 18, 2017 counted 4.4 million customers impacted statewide and reported that evening that "Miami-Dade County is 97 percent restored, Broward County is 99 percent restored". Both counties still had customers waiting when that release went out.
• • Ian, 2022. Ian's worst damage was not in South Florida, yet FPL's Sept. 30, 2022 release gave Southeast Florida its own line, noting the region had taken 36 hours of the storm's "feeder bands" before power was "essentially" back.
• • Milton, 2024. On Oct. 11, 2024, FPL's county table put both Broward and Miami-Dade under "Essentially Restored". The same release said the east coast saw tornado sightings with "devastating impacts to Palm Beach County and the Treasure Coast", and that the National Weather Service had "38 reports of tornadoes".

Three storms, three ways for a Broward or Miami-Dade office to go dark: a direct hit with days of restoration, a day and a half of outer bands, and tornado bands whose worst east-coast damage FPL placed just to the north, in Palm Beach County and the Treasure Coast. Storm planning is one chapter of the wider picture in our South Florida dental IT guide.

Which storm events break which parts of a dental office?

Each local event fails a different layer. Wind and tornado bands damage the envelope and exterior gear. Surge closes the building for days. A rain flood puts water at floor level with no cone to warn you. Outer bands cut power and internet while the suite stays dry. Each needs advance work and a decider.

The table below is ordered by event type, not by a countdown. That matters in South Florida, because two of the six rows arrive without a named storm, or without a storm aimed at you.

Table 1: which South Florida event breaks what in a dental office

Two rows deserve a second look. The first is the April 2023 rain. NWS Miami mapped 15 to 20 inches from Hollywood and Dania Beach up to Fort Lauderdale, and no tropical system was involved. The Ian row is the one most often underestimated: the suite is fine, but a day and a half of intermittent power is long enough to drain every battery unit in the closet and leave the server to crash unless it was set to shut itself down.

Does your office's surge zone change the IT plan?

It changes how early you lose the building, not where your data should have been all along. Miami-Dade's planning zones, A through E, decide who is told to leave as a storm approaches. The county itself warns they are not flood zones, so the office also needs its FEMA flood zone and floor level to place equipment.

Miami-Dade's own page sets out five zones. Zone A carries the greatest surge risk, starting with Category 1 storms; each letter after it needs a stronger storm, up to Zone E at Category 5. The county does not promise a fixed order of evacuation: it ties orders to each storm's "track and projected storm surge", whatever its category. And it adds a caution that matters for equipment placement: the zones cover surge only, "not your flood zone." The Know Your Zone lookup on Miami-Dade's storm surge page gives the answer for any address.

Broward publishes its own evacuation guidance on Broward County's evacuation page; look up the office and every staff home there rather than relying on what a colleague remembers from a past season. For flood risk, the separate lookup is FEMA's Flood Map Service Center. Nothing here says which streets take on water; the county and FEMA lookups decide that for each address.

What each answer changes in the IT plan:

• • Office in a low letter zone or a coastal evacuation area. Assume the building closes earliest and reopens last. The copy of the data that matters is the one outside the county, and it must be restorable by someone who is not in the building.
• • Office outside the surge zones but on the ground floor in a FEMA flood zone. The event to plan for is water at floor height. Server, switch, firewall, battery unit and the carrier's box belong on a rack or high shelf, away from plumbing walls.
• • Office on an upper floor. Water is less likely to reach the closet, but access, elevators and building power are the landlord's, so the reopening gate below starts with the landlord.

People often ask whether to carry the server home. Usually that is the wrong move: it is heavy, it holds every patient record, it is awkward to reconnect anywhere else, and a car in evacuation traffic is not a safer place than an elevated shelf in a locked suite. If a recently restored copy exists outside the county, the server can stay where it is. The build side of closet placement, carriers and exterior equipment is the subject of the network guide linked above.

Who on the team can keep the practice running from home, and from where?

Usually the front desk, billing and the office manager, if each one has power, internet, a practice laptop or secure remote access, and the credentials to use it. Whether they can depends on where they live as much as on the software, so map every person's zone, route and access before June, not after the cone appears.

A practice in Broward often draws staff from Miami-Dade and the reverse, which means two county systems, two sets of evacuation orders and very different commutes. The worksheet below is meant to be filled in, printed and kept with the plan. It is deliberately blank where a lookup gives the answer.

Table 2: staff and office zone worksheet (fill in each spring)

Three lessons come out of filling it in. First, keys pile up on one person. If the office manager holds the phone admin, the Microsoft 365 admin and the backup console password, the plan fails the day she evacuates north with a dead phone. Every key on the sheet needs a second holder or a sealed copy your IT provider can reach. If the server's disks are encrypted, add the unlock key to the list; a server that cannot be unlocked after a restart is as unavailable as one under water.

Second, "can work remotely" has two halves. Cloud practice software and Microsoft 365 email follow the person. A practice server running Dentrix, Eaglesoft or Open Dental in the closet only helps remote staff while the office still has power and internet; when the suite is dark, remote access to it goes nowhere. Write down which case you are.

Third, phones. Decide which person's cell takes the forwarded main number and who is second. Where the phones are internet-based, find out now who can change the forwarding and the recorded message remotely, and practise it once. For the choices behind that, see Dental VoIP phone systems.

What has to be true about your data before June 1?

By June 1, one copy of the practice database and images should live outside Miami-Dade and Broward, someone should have restored from it this year, and you should know what that copy leaves out. Someone other than the office manager must be able to start a restore without the office being open.

The ADA's page on emergency action plans lists offsite storage of electronic records among its basics and asks that plans be reviewed regularly, equipment maintained and "the plan is tested to make sure it works." A copy in the same strip center, or at a home a few miles away, sits under the same cone as the office. A copy that has never been restored is a hope rather than a plan.

Work through these with your provider and record a date beside each:

1. 1. Where is the outside copy, physically? A city, a region or a provider's data center outside the two counties.
2. 1. When was it last restored, and what was restored? One patient chart and one imaging study, onto a machine other than the server, is a fair test.
3. 1. What is not in it? Typical gaps: files saved on a single workstation, images held on an acquisition PC before they reach the server, scanned forms in a local folder, the phone system's settings, the firewall's configuration, and Microsoft 365 mail if nobody set up a separate copy.
4. 1. Who can start a restore from outside the building? By name, with the credentials in Table 2.
5. 1. Has anything changed since the last test? A new server, a move to a cloud version of the practice software, or new imaging such as a DEXIS, Carestream or Planmeca system all change what the copy has to hold.

How copies are made, checked and recovered as a managed service is described under backup and recovery for dental practices. To grade what you have now, the dental backup and recovery checklist goes question by question.

One federal pointer: 45 CFR 164.308(a)(7) in the HIPAA Security Rule sets out a contingency plan standard, with a data backup plan among its parts. Your compliance adviser is the right person to say what it asks of your office.

What should be decided — not done — when the storm enters the cone?

When the cone covers your county, the plan should need decisions, not projects. The owner decides whether and when to close; a named person shuts the closet down by a set time; the front desk switches greeting and forwarding; patients get one message; the IT provider confirms the outside copy is current.

Tie each decision to a public trigger rather than a clock, because South Florida storms speed up, stall and swerve:

• • When the office's county or zone appears in a watch or an evacuation order, the owner decides on closure and records when it will be reviewed. One person decides; the rest of the team is told, not consulted.
• • When the closure is decided, the provider is asked to confirm in writing the date and time of the last good copy outside the county, and that the server and imaging PCs will be shut down cleanly, with whatever its shutdown steps are for your equipment.
• • Before the last person leaves, the named person follows the closet steps the provider wrote for your office, unplugs what those steps say to unplug, and photographs the closet and front desk for the insurer.
• • When patients are told, use one message across phone greeting, text and website: closed, why, when the next update comes. Keep the list of patients you could not reach.
• • When FPL power fails at the office, nobody goes back in to check equipment until the storm has passed and the building has been cleared.

If the building is fine and only the connection has dropped, as on many outer-band days, switch to what to do when the office internet is down instead.

How do you decide the office can reopen?

Reopen when every gate in order has passed and someone named has confirmed it with evidence, not when the lights come on. The sequence runs from the landlord clearing the building, through stable power, a dry and cooled room, network, server and imaging checks, to the phones, and ends with one complete test patient before the first real one.

Table 3: the reopening gate (pass each one in order; a fail stops the line)

Gate 3 is the one most often skipped. A suite that has been shut and without cooling for days can be damp inside, and equipment brought up in that air is at risk even if no water ever touched it. Give the room time.

If the office cannot reopen for days, the alternative is to work from somewhere else. Dr. Richard Huot, writing for the Florida Dental Association's blog in October 2022 after Hurricane Ian, put the first step simply: "Make arrangements to retrieve your practice information from the cloud." He added that a new workstation or server may be needed so the dentist or office manager can reach it. That only works if gate 5's outside copy exists and Table 2 says who can use it.

What if water got into the building — including from rain, not a hurricane?

Treat it as a rebuild, not a restart. Keep any device that may have been wet switched off and unplugged, take photographs before anything is moved, notify the insurer, and rebuild onto clean or replacement hardware from the outside copy. Plan for it without a named storm too: Fort Lauderdale's April 2023 flood was rain.

On April 12-13, 2023, NWS Miami found rainfall totals "in excess of 20 inches" around Fort Lauderdale/Hollywood International Airport. There was no hurricane that week. An office whose plan only activates when a storm is named had no trigger that week. Add a line to the closure rule that covers standing water in the parking lot or the street outside, whatever the forecast calls it.

After water, in order:

• • Power stays off at the equipment. Resist testing a soaked device by switching it on. Current through wet boards can ruin drives a recovery service might still have read.
• • Pictures and serial numbers first. Your insurer will want the closet, each operatory, the front desk and the equipment labels as they were found.
• • Moisture before electronics. Even equipment above the water line can be affected by days of wet air. The A/C and drying come before any test.
• • Restore, don't revive. The outside copy becomes the source. Replacement hardware is ordered, the provider restores to it, and the reopening gate starts again at gate 1.
• • The old drives still hold patient data. Keep them secure until the provider and the insurer agree how they are disposed of.

Building choices that reduce the damage next time, such as closet height and position, are part of the network guide linked earlier.

Does cloud software remove the need for a storm plan?

No, but it changes the plan. With cloud practice software and Microsoft 365, the schedule, charts and email follow any staff member who has power and a connection somewhere. The operatories do not follow them: sensors, imaging and chairs stay in the suite, and in a county-wide outage most homes are dark too.

What cloud does well in South Florida is take the server out of the surge and flood question. When the charts sit in a provider's data center, water in the closet costs hardware, not records, and gate 5 in Table 3 gets shorter. What it does not do is remove imaging, phones, the network or the people questions in Table 2.

Whether a move makes sense for your practice is a wider decision than the storm. The trade-offs are laid out in cloud options for dental practices and in the guide on replacing the server or moving to the cloud.

What does storm-ready IT cost?

Legend Networking publishes two figures: plans "Starting at $360 per month" and "Backup protection from $39.99 per month (storage-dependent)". Hardware procurement, major cabling projects and software licensing are quoted separately, so a rack, a new battery unit or replacement equipment after a flood is its own quote, outside the monthly figure.

This page lists no package, because the right scope turns on how many workstations you run, how much imaging data must be protected and whether your practice software lives in the closet or in the cloud. The published service lines that bear on a storm plan are:

• • 24/7 monitoring.
• • Helpdesk staffed 24/7 at 1-800-794-1588, one general number.
• • In-house engineers; no outsourced first-level triage.
• • Onsite dispatch by appointment across served dental markets; remote-first nationwide.

Ask how the onsite line applies to your suite in Broward or Miami-Dade. During and just after a storm, an onsite visit is something to schedule once roads and buildings are open, not something any provider can set a clock on. Legend is headquartered in Dallas, with 22+ years in dental IT (since 2004), and has "Served over 3,500 practices since 2004"; its Google profile shows a 4.8 rating · 173 Google reviews. On Legend's side: Ian Lynch — 22 years in dental IT; oversees the NOC, onsite dispatch and client technology roadmaps.

Legend's own project pages show two Broward openings: Goodshine Dental in Tamarac, part of the Fort Lauderdale area, and Good Hands Dental in Miramar. Both were new-office technology projects, not storm work. County by county, the commercial detail is on Fort Lauderdale and Broward dental IT support and Miami dental IT services. The year-round managed side is in our guide to managed IT for Miami dental practices.

What to ask your IT provider before hurricane season

Send these in April or May and ask for the answers in writing. They are written for a South Florida office; a provider who has planned for a season here should answer most of them in one reply.

Sources for the South Florida storm record

We opened each of these on October 19, 2026 and took the dated weather, utility and code facts above from them in their own words: NOAA's National Hurricane Center climatology page; FPL's news releases of Sept. 18, 2017 (Irma), Sept. 30, 2022 (Ian) and Oct. 11, 2024 (Milton); the NWS Miami public information statement of April 13, 2023, read through the Iowa Environmental Mesonet archive of NWS text; Miami-Dade County's storm surge planning zones page; the 2023 Florida Building Code chapter 2 definitions as reproduced by UpCodes; the ADA's emergency planning page; the Florida Dental Association blog post by Dr. Richard Huot; and 45 CFR 164.308 at Cornell's Legal Information Institute. Broward County's evacuation page and FEMA's flood map lookup are linked as places to check an address, not quoted.