Success Stories

Columbus Regional Health Creates Enterprise-Wide Auditing With a Flexible Solution for All Users

Issue link: https://www.fairwarning.com/insights/i/1089137

Contents of this Issue

Navigation

Page 0 of 2

Overview When Columbus Regional Hospital (CRH) received a patient privacy complaint in 2005, the security and IT team accessed the clinical system audit logs and found very minimal data. In fact, they found that the user logged on / off data was overwritten every 24 hours. As it was a newer and very large clinical system, the CRH team reached out for help to the vendor as learned that to add the auditing functions they were looking for would cost $150,000 and this was only for the one system. For CRH this was the catalyst to find a true auditing solution. CRH faced many challenges that are common to a health system: • Lack of proper due diligence, facts, and follow through on privacy complaints • The risks incurred to rely on a manual process to follow the HIPAA rules • Struggling with the time-intensive effort exhausted • Mitigating legal risks for the organization Challenges CRH was depending on vendor solutions and in many cases there was no solution. Vendors were also instructing CRH not to turn on auditing capabilities saying in their clinical applications. "[Vendors said] they take too much storage space and may have a negative impact on performance of system. I can't tell you how many times I heard that," said Audrey Tyree, Manager of Information Security and CRH Security Officer. One vendor, for example, started building an audit server for a few of their products in what CRH called an inflexible approach with very inflexible tools. "You had to think like the person who wrote it. There was no teaming together to come to solution." The CRH evaluation team consisted of both security and privacy officers, technical integration programmers, and network and system administra- tors. Frustrated by the lack of solutions from the application and security vendors, they discovered FairWarning and reached out for help. ® Organization • $160M Revenue • 1,700 Employees • 225 bed inpatient hospital in Columbus, Indiana also serving Indianapolis, Cincinnati and Louisville • JCAHO Stroke Center Designation • HFAP Accredited • Chest Pain Center Designation • Magnet for Nursing Designation • "Most Wired 100" Award Winner • American Hospital Association McKesson "Quest for Quality" Winner • "Best Places to Work in Indiana" by Indiana Chamber of Commerce Health Information Systems • Cerner Millennium • ChartMaxx • McKesson Horizon Clinicals • McKesson Physician Portal • McKesson Star Interviewees • Audrey Tyree, Manager of Information Security and Security Officer • Cindy Spann, Director of Health Information and Privacy Officer ® CUSTOMER SUCCESS STORY Enterprise-Wide Auditing with FairWarning

Articles in this issue

view archives of Success Stories - Columbus Regional Health Creates Enterprise-Wide Auditing With a Flexible Solution for All Users