New Resiliency Program Aims to Keep Patient Care Running During IT Outages

When a hospital's technology systems go down, patient care can be severely disrupted. The Joint Commission and the American Hospital Association (AHA) recognize this critical issue and have launched a new voluntary resiliency program designed to help healthcare organizations prepare for extended IT outages.

The Cyber Resilience Readiness program addresses the practical challenges of maintaining patient care during what is often referred to as "digital darkness." William Walders, EVP and Chief Digital and Information Officer at the Joint Commission, emphasizes that the focus should not just be on technology recovery but also on ensuring continuous and safe healthcare delivery. “When systems go down, can we continue to deliver healthcare? That’s the driver,” he said.

The average clinical outage lasts 28 days, a duration that brings significant safety challenges many organizations may not be equipped to handle. The program aims to change the narrative from a purely technological problem to one centered on patient care and safety. It was developed over 18 months with input from various healthcare organizations that have faced cyberattacks, extreme weather events, and vendor-related lockouts.

Preparing for Digital Darkness

The program starts with a free online self-assessment tool designed to evaluate an organization's readiness for extended technology outages. This assessment covers multiple domains of an organization’s posture and processes, including clinical operations, communication strategies, and emergency protocols. It is applicable to organizations of all sizes and scales, making it accessible to a wide range of healthcare providers.

Walders explained that the self-assessment has around 50 questions and should take about half an hour to complete. Partner hospitals have already piloted the tool, providing valuable feedback to refine its effectiveness. The assessment helps organizations identify gaps in their current preparedness and provides actionable recommendations for improvement.

One of the key aspects of the program is its emphasis on practical solutions. For instance, it encourages healthcare providers to develop paper-based workflows and communication plans that can be quickly implemented during an outage. This ensures that patient care continues uninterrupted, even when digital systems are unavailable.

Why It Matters

The implications of extended IT outages in healthcare are profound. Patient safety is the primary concern, as disruptions can lead to delays in treatment, miscommunication among staff, and potential medical errors. The Cyber Resilience Readiness program aims to mitigate these risks by providing a structured approach to preparedness.

The financial impact of such outages cannot be overlooked. Hospitals may face significant costs related to downtime, data recovery, and potential legal liabilities. By enhancing their resiliency, organizations can reduce these risks and ensure smoother operations during crises.

Ultimately, the success of this program depends on widespread adoption and continuous improvement. The Joint Commission and AHA are committed to supporting healthcare organizations in their efforts to become more resilient, ensuring that patient care remains a top priority even in the face of technological challenges.