McKesson Privacy Monitoring2017-02-01T17:44:26+00:00

McKesson High-Availability Privacy Monitoring with FairWarning

When manual auditing activities started requiring six to eight full-time employees to devote a few days to a few weeks to produce results, Health First turned to FairWarning for Patient Privacy Monitoring.

Health First’s four not-for-profit hospitals and twelve clinics throughout Brevard County serve Florida’s Space Coast. The goal of Health First’s information systems team is to have all necessary patient information available whenever and wherever it is needed, but previous attempts at proactive auditing to ensure that information was still protected were inefficient and costly.

Health First needed a better solution and McKesson’s recommendation turned them to FairWarning. Not only was FairWarning able to provide that solution, but they were also able to load three years of historical data for immediate historical reporting.

Using FairWarning, Health First is able to meet regulatory requirements of monitoring, researching, tracking incidents, auditing, and compliance reporting with only one and a half full-time employees. This represents a nearly 80% reduction in required resources, while at the same time handling increased regulatory responsibility.

Challenge

In late 2008, Health First began looking for more efficient ways to perform auditing of electronic health records. They were frustrated with their limited search capabilities within each application, as well as the variation in report format, a different output from each system. Once reports were completed, there was no efficient method to aggregate the data or correlate with any other systems, and this severely limited their ability to be proactive.

At any given time, Health First’s proactive auditing activities required between six and eight full-time employees, and results took from a few days to as much as a few weeks to produce.

Solution

During discussions with McKesson about more effective auditing methods, FairWarning was introduced. “FairWarning really stood out as the only product that could assist with the challenges we were facing,” says Chris Schmidt, Network Security Systems Engineer.Ultimately, Health First chose FairWarning for proactive auditing and monitoring to enable:

• Near real-time auditing capabilities

• Proactive alerting of potential incidents, including self-examination, VIP snooping, and off-shift viewing of medical records

• Ability to load in historical data for immediate historical reporting

Results

Using FairWarning, Health First is able to meet regulatory requirements of monitoring, researching, tracking incidents, auditing, and compliance reporting with only one and a half full-time employees. This represents a nearly 80% reduction in required resources, while at the same time handling increased regulatory responsibility.

Since the implementation of FairWarning, Health First is able to be more proactive in their auditing activities. They have increased the number of random audits being performed and have dramatically decreased their incident response time.

Finally, the privacy and compliance team is better able to track and document their compliance activities using the Tracking & Reporting functionality within FairWarning. Using these reports, Health First is able to track system-specific compliance issues, and focus on training and improvements in the highest-risk areas.

Download PDF

Implementation Experience

With an existing and long-standing relationship, Health First elected to purchase through McKesson. Buying through McKesson made the process simple and straightforward. Moreover, the Health First team notes that working with McKesson greatly assisted in getting the data out of their clinical systems, as they were able to work directly with the managed services team. From the beginning, Health First identified the five highest priority healthcare applications to begin auditing. These included:

• McKesson Horizon Patient Folder
• McKesson Horizon Patient Portal
• McKesson Star Audit
• Eclipsys Sunrise Clinical Manager
• Surgery Information Systems Perioperative Solution

Working with the FairWarning team, Health First was able to back-load three years’ worth of data, so that they could immediately begin to utilize FairWarning to assist with pre-existing complaints.

Health First demanded the peace of mind of knowing their FairWarning’s Patient Privacy Monitoring solution would survive a catastrophic server or application event. They chose to implement two FairWarning Enterprise Servers for hardware fail over and deployed the Breach Detection Database on an EMC Centera storage array to complete their high availability implementation.

Profile

  • 4 hospitals
  • 12 clinics
  • Over 800 beds
  • 400 physicians

Health Information Systems

  • Allscripts (Eclipsys) Sunrise Clinical Manager
  • Mckesson Horizon:
    • Patient Folder
    • Patient Portal
  • Mckesson Star Audit
  • Surgery Information Systems Perioperative Solution
  • Symantec Security Information Manager

FairWarning Products

Making Auditing Across Multiple Applications a Reality – Baptist Health Care

When Baptist Health Care became concerned about confidentiality among their EHR records, the McKesson-equipped facility needed FairWarning to ensure their records were safe.

Read the Case Study

Deployment of Patient Privacy Monitoring at Detroit Medical Center

With increasing regulatory requirements and a strong reputation to uphold, Detroit Medical Center recognized the need for more advanced auditing capabilities to protect their patients privacy.

Read the Case Study