High Class Healthcare : Disaster Recovery Plan

A Disaster Recovery Plan (DRP) focuses on the recovery of IT systems, applications, and data in the

Presentation regarding the university’s Disaster Recovery Plan/Enterprise Continuity Plan including: basic structures; roles within the DRP/ECP plan; areas within a company if addressed improve resilience to catastrophic events, and an employee awareness campaign.

In day to day operations, uncertainties do occur. Henceforth it would be important to have a contingent and well detailed disaster preparedness plan and procedures. Healthcare systems, on a day to day basis, are faced with emergencies in form of disasters. As a result, majority of medical centers have well-structured exit plans in the event of a disaster occurring("Hospital Disaster Preparedness: Your Guide to Getting Started - Emergency Preparedness", 2011). However, this essay will aim at interviewing one of the top disaster preparedness staffat the Houston Methodist Hospital. In the interview, I will seek to identify the top three disasters that the Houston Methodist Hospital is prepared for. Similarly, in the interview, I would seek to identify the top lessons learnt from disaster preparedness at the hospitals.As it concludes it would summarize the findings with regards to the interview stated below. Below is an excerpt from the interview to answer the two aforementioned questions.

The mindset that data security is only an IT issue - Some hospital management only engage in data security after they see the financial and public relations impact of a data breach made on another healthcare organization

With the introduction of information technology advancement into the hospital health care system, we must embrace in this technology and must ensure that we have a more efficient and secure system. This will allow us to create measures that will allow us to protect electronic protected health information (ePHI). All data that is being transmitted on any open networks will be protected from any cyber attackers or unauthorized personnel. In order to protect this data, any ePHI data will be sent by encrypting the data to ensure that in the event that it is intercepted it

Hospital. Successful transition to lCD-10--CM and ICD-10-PCS requires careful strategic planning and coordination of resources across the entire hospital. Planning for lCD-10 must engage executive leadership, particularly since the coordination challenges span across a wide range of functional areas, including finance, information services, decision support, compliance and the medical staff. Business areas that make up the hospital setting may include: (a) Information systems including health information systems and ancillary departments; (b) Financial services in accounts receivable, billing, and finance; (c) Medical management comprised of medical records, quality/mortality and morbidity data, patient care units, and clinical affairs; and (d) Patient access for admissions, registration, scheduling, and insurance verification.

The following document shall serve as the RFP (Request for Project) for the Patton-Fuller Community Hospital. Team A has researched the hospital’s current IT systems seeking ways to ensure many years of continued success and compliance with the very best practices in the IT community today. Specific areas such as networking architecture design and the future proofing of the design for speed, accuracy, and security of the system shall be discussed as part of this RFP. Special consideration was given to the sensitive nature of the security surrounding patient information while

Additionally, the preparation phase covers all fundamentals of an incident response plan, reports interaction among basics, and increases to emergency response planning at some point in the life of an incident in order to develop the necessary trust relationships that will be fully exercised during the stress of a real crisis. According to Whitman (2012) “The Disaster Recovery Plan Similar in structure to the IR plan, the DR plan provides detailed guidance in the event of a disaster. It is organized by the type or nature of the disaster, and specifies recovery procedures during and after each type of disaster. It also provides details on the roles and responsibilities of the people involved in the disaster recovery effort, and identifies the personnel and agencies that must be notified. Just as the IR plan must be tested, so must the DR plan, using the same testing mechanisms.” (P. 231). Many of the same principles of incident response apply to disaster recovery such as fundamentals must be clearly established, roles and responsibilities must be visibly outlined, someone must initiate the alert schedule and notify key personnel, someone must have the responsibility of the documentation of the disaster and only if it is possible, attempts must be made to moderate the impact of the disaster on the operations of the organization.

In the current era of digitization, with all the data being converted from paper to electronic records, even the healthcare industry has become so dependent on technology. As hospitals are adopting electronic means for data storage, medical results, transactions and billing, utmost care is to be taken to protect a patient’s personal privacy by protecting their electronic health records, which is only possible by enhancing the security and privacy of the hospital’s network. This paper proposes certain security mechanisms for a more controlled and safer access to the healthcare provider’s network, thus being aware of every device trying to access the network and making sure only authorized devices are able to connect, with the help of measures such as, intrusion detection systems to continuously monitor the network, firewalls to ensure endpoint devices comply with security policies and biometrics for identity based network access control.

Every business and organization can experience a serious incident which can prevent it from continuing normal operations. This can happen any day at any time. The potential causes are many and varied: flood, explosion, computer malfunction, accident, grievous act... the list is endless.

Disasters have become an inevitable part of businesses and organizations as well. They not only have a major effect on business and organizational continuity; they also result to an overhaul in organizational operational mechanisms (Awasthy, 2009). It is for this reason that many organizations and business resort to preparing business continuity plans and disaster recovery plans that will facilitate better disaster management in future. Effective disaster recovery plans are important to every business and organization (Thejendra, 2008).

Disaster recovery is the process of an organisation uses to recover access the data, and also hardware that are needed to recollect the performance to be in normal position after a disaster occurs. While disaster recovery plans have to be focus in every aspect in any organisation and bringing the gap closure after destruction it can be like data, hardware, or software have been lost and the manpower that composes much of any organisation.

Disaster Recovery Planning is the critical factor that can prevent headaches or nightmares experienced by an organization in times of disaster. Having a disaster recovery plan marks the difference between organizations that can successfully manage crises with minimal cost, effort and with maximum speed, and those organizations that cannot. By having back-up plans, not only for equipment and network recovery, but also detailed disaster recovery plans that precisely outline what steps each person involved in recovery efforts should undertake, an organization can improve their recovery time and minimize the disrupted time for their normal business functions. Thus it is essential that disaster recovery plans are carefully laid

Owning a business can have many stressors day to day. When starting a business there is a lot of planning and preparation involved. Many small businesses are owners who have put their own money into the business and look at it as an investment. Unfortunately with all the planning that goes into starting a business, one thing is often over looked. Most of the time the “what ifs”, are not part of the planning stage. One reason for this is that people do not like to think of the bad things that could or may happen. So with all the time and planning put into starting a business why not put some extra thought into a plan B if a disaster strikes? This plan B could be a business continuity plan or a disaster recovery plan. Business continuity plans are an essential part of the modern day business. There are so many potential disasters for small businesses that could seize the production or even close the business down for good. A recent study from Gartner Inc., found that “90% of companies that experience data loss go out of business within two years. It also found that 80% of company owners have not thought about how they would keep their businesses up and running if a data disaster occurs.” According to the Association of Records Managers and Administrators, “about 60 percent of businesses that experience a major disaster such as a fire close

Disaster recovery plan (DRP) is a clearly defined and documented plan of action for use at the time of a crisis. Typically a plan will cover all the key personnel, resources, services and actions required to implement and manage the DR process (comission, 2014).