ICly, nobody notices anything change in the physical world. Either the SecForce guy wasn't alerted or he's just playing it extremely cool.
Let's roll Matrix Security for Doc:
Logic 9 + Matrix Security 4:
13d6t5 6 hitsAs for a response, if there's not a security spider on staff then one might respond from a remote location. The host will likely launch whatever IC it has available - Doc would guess Patrol for sure, if it wasn't already running, but Marker, Probe, Scramble, and Track are all possible. The spider will sweep the system looking for unusual activity. If he or she doesn't find any (which they won't in this case, since Doc didn't get inside to do anything), they will likely chalk it up to an errant sprite or a bored technomancer. (Remember that PCC has an above-average population of the Emerged.) The spider will figure that the Firewall did its job. The system will likely remain on passive alert, with Patrol IC active if it wasn't before, but no reason to call in a full response.
Ace's opinion is that Matrix threats receive Matrix responses unless there's a plausible reason to believe that there's a corresponding physical threat. This is especially true for a hospital, where the administrators would be very wary of alarming their patients unduly. No need to give Mrs. McMurphy a heart attack.