Keeping up with computer security makes good business sense. The modern practice relies heavily on computer systems for daily operation, and downtime equates to lost production. Unless you're on an "all you can eat" IT support plan, downtime also means additional expenses. You need to minimize downtime. You have compliance obligations operating a covered entity subject to HIPAA regulations (there's plenty written on that). Any responsible practice wants to protect its information. Keeping up is a must in the modern practice to prevent downtime, protect data, and meet compliance obligations.