1

Gaining Time Back with Your Privacy & Security Program

Session #166, March 7, 2018

François Bodhuin, Technology Director - ISO, Inspira Health Network

2

François Bodhuin

Has no real or apparent conflicts of interest to report.

Conflict of Interest

3

Agenda• About Inspira

• Learning Objectives

• Privacy and Security Programs at Inspira

• Inspira and Managed Services

• Inspira and FairWarning

4

Learning Objectives• Understand the main advantages of moving to the cloud for long

term security and compliance success

• Learn about innovative techniques and solutions to regain expertise and time back in day

• Discover how aligning with a managed solution leverages resources to gain more value

5

INSPIRA HEALTH NETWORK

As of November 13, 2017

6

Physician Offices19 30

Urgent Care1 9

Imaging Centers6 9

2012

155+Putting Inspira on the Map…

7

Master Facility Planning

Mullica Hill Inspira Medical Center set to open fall of 2019…

8

Inspira Vineland Senior ED

9

Other Projects/Expansions

• 36 beds expansion in Vineland

• Behavior Health program

• New Detox program

• Medical Transportation

• Geographic expansion (5 counties in NJ)

10

My Inspira - App

• Appointments

• Directions (Way finding)

• Physicians list

• ER Wait Times

• Pay bills

• Schedules of classes and events

• Access to our Patient Portal (NJSHINE)

• Healthcare Concierge

11

The Brand Promise spearheaded our efforts to ease patients efforts

on accessing our services…

Call

Volume

71,805 135,397

Abandonme

nt Rate10% 4%

2015 2017

89%

Increase

12

High Reliability Organizations

• A high reliability organization (HRO) is an organization that has succeeded in avoiding catastrophes in an environment where normal accidents can be expected due to risk factors and complexity.

13

Nationally Recognized for Quality…

14

Partnerships Built for Success!

Growth in Partnerships has allowed our patients to take advantage of

some of the best in the Nation!

(Hospitalists &

Intensivists)

15

Learning Objectives (reminder)• Understand the main advantages of moving to the cloud for long

term security and compliance success

• Learn about innovative techniques and solutions to regain expertise and time back in day

• Discover how aligning with a managed solution leverages resources to gain more value

16

Moving to the cloud• Many Definitions with Pros and Cons

– Hosted Datacenter

– Hosted Services

– Private Cloud

– Managed Services (Inspira’s privacy program)

– …

17

Moving to the cloud with MSS• PROS

– Lower costs

• Hardware

• Training

• On-boarding

– Time Saver

– Expansion of Team

• CONS

– Introduce new technologies (CITRIX, …). Can also be a PRO

– Need to be managed carefully (SLA, SOW, …)

– Setup

– Turnover – sill levels, lack of experience

18

Moving to the cloud• PROS

– Issues are more “intense” – no triage. Keeps staff interested

– Brings a different perspective

– No dealings with product vendor

– Transfer budget to OPS

– Infosec – qualified personel

• CONS

– Level of Service – Cannot do everything

– Each MSP – different management approach

– Do not have as much ownership as dedicated employees

19

Inspira in the cloud• Hosted – Lawson, Office 365, SOARIAN and now CERNER

Millennium

• Appliances on site – DLP, email encryption, … MSS

• Vulnerability management - MSS

• SIEM - MSS

• Vendor Management – closer to MSS

• Wound Care – application in the cloud

• Fairwarning – Compliance – Presently moving to cloud MSS

20

Managed Service

• FTE replacement

• Infrastructure

• Regain time

• Gain expertise

21

Managed Service

• FTE replacement

- No need to add FTE (Budget shift)

- Expertise

- On-boarding costs (search, training, …) etc…

- Watch for turnover

22

Managed Service• Infrastructure

– Hosted servers?

– Appliance on site?

– Patching

– Upgrading Hardware and Software

– DR, redundancy and resiliency

23

Managed Service• Regain time for Privacy Team

– Daily work – done by MSS

– Triage issues

– Similar to Complaint hotline (They know when it is significant)

– Effectiveness reports – Board reports, …

24

Managed Service• Gain expertise

– Learn a lot during install (Best practice, P&P review, …)

– What do we trust them to do?

– Similar to compliance hotline. They know when the issue is significant.

– They could run the whole show. (liability, …)

25

Fairwarning – move to Managed Service

• Inspira and Fairwarning – a little history

• Why move to MSS with Fairwarning?

• How is the move going?

– Very Structured – PM

– Brings different point of view and new expertise

– Change the way we work (investigations)

• Time saved

• New forms which mirrors the OCR Investigations

– Expertise gained

– Lower costs

26

Conclusion

- Time saved for Privacy Team

- Expertise gained

- $$ Saved

- Must not minimize the time it takes to manage MSS (team concept)

- In the end, do more with more, not with less

27

Questions

• François Bodhuin, Technology Director - ISO, Inspira Health Network

• Email: bodhuinf@ihn.org

• LinkedIn: https://www.linkedin.com/in/francois-bodhuin-a8556916/

• Please complete the online session evaluation