Business Impact Analysis (BIA) Plan for Health Inc.
-
Contents
3.1 Identifying the Environment 1
3.2 Identifying Key Stakeholders 2
3.3 Identifying Critical Business Functions 2
3.4 Identifying the Maximum Acceptable Outage (MAO) and Impact 2
3.5 Identifying Recovery Priorities 3
The purpose of this document is to provide a high-level overview of Business Impact Analysis of Health Inc.
The scope of this document is to cover the IT infrastructure of Health Inc. The analysis will determine the mission/ business processes for the organization, identify recovery criticality for any incident or disaster event, identify resource requirements and identify recovery priorities for system resources based on the criticality.
Health Inc. is delivering superior health care services with most innovated technology, and research. Its major departments include pediatric intensive care unit, and pediatric emergency department. The specialties of its services include pediatric cardiology and cardiac surgery, pediatric urology, pediatric gastroenterology care, pediatric neurology, kidney diseases, Neonatal Intensive Care Unit (NICU) and pediatric endocrinology. The business impact analysis (BIA) will consider emergency department and intensive care unit. [ CITATION And10 \l 1033 ]
Key stakeholders are those who are affected with maximum acceptable downtime of the system. These individuals also have direct influence on procedures and outcomes. Key stakeholders to be identified include:
Table 1.0: Key Stakeholders Identification with Systems Usage |
|
Key Stakeholders |
Stakeholders Dependencies on System Usage |
Surgeons |
Schedule of surgical procedures in operating room suites, request for specific instruments, display customer medical history, previous medical tests to be completed, continuous display of required information during surgery |
Emergency Medicine Physicians (EMP) |
Providing medical surgical information, searching relevant medicine, availability of medicine, patient vital signs before or after medicine |
Patients |
Facilitating Patient treatment in ICU or emergency department. System outage may affect the critical condition of patients in ICU and emergency department |
Medical staff and Nurses |
Review patient medicine given, patient medical record e.g. blood pressure, and glucose level. Scheduling nursing shifts in emergency department and ICU. Allow access to medical information resources required in their care setting |
As a healthcare organization, Health Inc. uses a wide variety of business equipment and tools to keep the health care facility running. These technologies are very critical for the business functionality as the production is completely dependent on these technologies. Some of the most critical business functions are identified based on how they are used and how they can impact the business in case of an outage. Some of the critical systems used by Health Inc. are Radio Frequency Identification Devices (RFID), ICU-CDSS (Intensive Care Unit- Clinical Decision Support System), the database servers, EHR systems and the email servers.
This section identifies the types of impact categories that a system distribution is likely to encounter. With the critical resources identified, it will be easy to identify the maximum acceptable outage. The maximum acceptable outage defines the maximum amount of time that a system or resource can remain unavailable before there is an unacceptable impact. Radio Frequency Identification (RFID) uses electromagnetic fields to automatically identify and track tags attached to objects. It is very critical in Health Inc. The maximum downtime for RFID would be 1 hour. As for the intensive care unit- clinical decision support which is designated to the care of patients who are seriously ill, can also be a critical resource. The ICU-CDSS generates $1,500 in revenue an hour losing as much as $2,000. The maximum downtime for ICU-CDSS would be 2 minutes. The systems must be restored asap or else it will be life threatening to the patients in the ICU. The database servers can be out for a maximum of 4 hours. If we consider the production environment, for each hour of operation being held, the loss will be approximately $3,000 an hour. Since the production environment for certain databases may be inaccessible, this can cause a big loss. The patient health information is stored in EHR (Electronic Health Record) system. If the system is unavailable for a period of time, the care provider will not be able to provide proper care to the patient. In average, an hour of outage can cause about $4000-$5000 in loss if EHR is unavailable. This can in fact stop the full business continuity of the facility.
This part will identify the critical systems from most to least important being based off of the maximum acceptable outage. The table below shows the comparison between systems and depending on the MAO and impact, which should be recovered first.
Resource |
MAO (Maximum Acceptable Outage) |
IMPACT |
ICU-CDSS (ICU- Clinical Decision Support System) |
2 minutes |
Can be life threatening to the patients |
Database server |
5 minutes |
Unavailability of production data |
RFID |
1 hour |
Impacting the traffic flow in the healthcare facility, monitoring sophisticated equipment within the facility. |
Email server |
2 hours |
Loss in primary communication within the company and with external vendors |
EHR |
5 minutes |
Unavailability of patient health information which may cause delay in care providing |
Here is where the systems are categorized by priorities. The most important system systems have a category of high while others are listen as medium and low, on a scale of 1-3 with 1 being the highest priority.
SYSTEM |
PRIORITY |
ICU-CDSS |
1 |
Database server |
1 |
EHR Systems |
1 |
RFID |
3 |
Email server |
2 |
The RTO defines maximum time a system can be unavailable before any significant impact occurs. The table below shows a detailed information on the RTO for the critical systems within Health Inc.
Priority |
Recovery Time Objective |
ICU- CDSS |
Up to 2 minutes of unavailability |
Database server |
Up to 5 minutes of unavailability |
EHR systems |
Up to 5 minutes of unavailability |
RFID devices |
Up to 1 hour of unavailability |
Email server |
Up to 2 hour of unavailability |
-
- Assignment status: Resolved by our Writing Team
- Source@PrimeWritersBay.com
Comments
Post a Comment