The purpose of this document is to provide a high-level

Business Impact Analysis (BIA) Plan for Health Inc.

1. Contents

1 Purpose 1

2 Scope 1

3 Procedure 1

3.1 Identifying the Environment 1

3.2 Identifying Key Stakeholders 2

3.3 Identifying Critical Business Functions 2

3.4 Identifying the Maximum Acceptable Outage (MAO) and Impact 2

3.5 Identifying Recovery Priorities 3

3.5.1 MAO and impact for specific resources. 3

3.5.2 Recovery properties & Recovery Time Objective (RTO) 4

1. Purpose

The purpose of this document is to provide a high-level overview of Business Impact Analysis of Health Inc.

2. Scope

The scope of this document is to cover the IT infrastructure of Health Inc. The analysis will determine the mission/ business processes for the organization, identify recovery criticality for any incident or disaster event, identify resource requirements and identify recovery priorities for system resources based on the criticality.

3. Procedure

   1. Identifying the Environment

Health Inc. is delivering superior health care services with most innovated technology, and research. Its major departments include pediatric intensive care unit, and pediatric emergency department. The specialties of its services include pediatric cardiology and cardiac surgery, pediatric urology, pediatric gastroenterology care, pediatric neurology, kidney diseases, Neonatal Intensive Care Unit (NICU) and pediatric endocrinology. The business impact analysis (BIA) will consider emergency department and intensive care unit. [ CITATION And10 \l 1033 ]

1. 2. Identifying Key Stakeholders

Key stakeholders are those who are affected with maximum acceptable downtime of the system. These individuals also have direct influence on procedures and outcomes. Key stakeholders to be identified include:

Table 1.0: Key Stakeholders Identification with Systems Usage
Key Stakeholders	Stakeholders Dependencies on System Usage
Surgeons	Schedule of surgical procedures in operating room suites, request for specific instruments, display customer medical history, previous medical tests to be completed, continuous display of required information during surgery
Emergency Medicine Physicians (EMP)	Providing medical surgical information, searching relevant medicine, availability of medicine, patient vital signs before or after medicine
Patients	Facilitating Patient treatment in ICU or emergency department. System outage may affect the critical condition of patients in ICU and emergency department
Medical staff and Nurses	Review patient medicine given, patient medical record e.g. blood pressure, and glucose level. Scheduling nursing shifts in emergency department and ICU. Allow access to medical information resources required in their care setting

1. 3. Identifying Critical Business Functions

As a healthcare organization, Health Inc. uses a wide variety of business equipment and tools to keep the health care facility running. These technologies are very critical for the business functionality as the production is completely dependent on these technologies. Some of the most critical business functions are identified based on how they are used and how they can impact the business in case of an outage. Some of the critical systems used by Health Inc. are Radio Frequency Identification Devices (RFID), ICU-CDSS (Intensive Care Unit- Clinical Decision Support System), the database servers, EHR systems and the email servers.

1. 4. Identifying the Maximum Acceptable Outage (MAO) and Impact

This section identifies the types of impact categories that a system distribution is likely to encounter. With the critical resources identified, it will be easy to identify the maximum acceptable outage. The maximum acceptable outage defines the maximum amount of time that a system or resource can remain unavailable before there is an unacceptable impact. Radio Frequency Identification (RFID) uses electromagnetic fields to automatically identify and track tags attached to objects. It is very critical in Health Inc. The maximum downtime for RFID would be 1 hour. As for the intensive care unit- clinical decision support which is designated to the care of patients who are seriously ill, can also be a critical resource. The ICU-CDSS generates $1,500 in revenue an hour losing as much as $2,000. The maximum downtime for ICU-CDSS would be 2 minutes. The systems must be restored asap or else it will be life threatening to the patients in the ICU. The database servers can be out for a maximum of 4 hours. If we consider the production environment, for each hour of operation being held, the loss will be approximately $3,000 an hour. Since the production environment for certain databases may be inaccessible, this can cause a big loss. The patient health information is stored in EHR (Electronic Health Record) system. If the system is unavailable for a period of time, the care provider will not be able to provide proper care to the patient. In average, an hour of outage can cause about $4000-$5000 in loss if EHR is unavailable. This can in fact stop the full business continuity of the facility.

1. 5. Identifying Recovery Priorities

This part will identify the critical systems from most to least important being based off of the maximum acceptable outage. The table below shows the comparison between systems and depending on the MAO and impact, which should be recovered first.

1. 1. 1. MAO and impact for specific resources.

Resource	MAO (Maximum Acceptable Outage)	IMPACT
ICU-CDSS (ICU- Clinical Decision Support System)	2 minutes	Can be life threatening to the patients
Database server	5 minutes	Unavailability of production data
RFID	1 hour	Impacting the traffic flow in the healthcare facility, monitoring sophisticated equipment within the facility.
Email server	2 hours	Loss in primary communication within the company and with external vendors
EHR	5 minutes	Unavailability of patient health information which may cause delay in care providing

Here is where the systems are categorized by priorities. The most important system systems have a category of high while others are listen as medium and low, on a scale of 1-3 with 1 being the highest priority.

1. 1. 2. Recovery properties & Recovery Time Objective (RTO)

SYSTEM	PRIORITY
ICU-CDSS	1
Database server	1
EHR Systems	1
RFID	3
Email server	2

The RTO defines maximum time a system can be unavailable before any significant impact occurs. The table below shows a detailed information on the RTO for the critical systems within Health Inc.

Priority	Recovery Time Objective
ICU- CDSS	Up to 2 minutes of unavailability
Database server	Up to 5 minutes of unavailability
EHR systems	Up to 5 minutes of unavailability
RFID devices	Up to 1 hour of unavailability
Email server	Up to 2 hour of unavailability

• • Assignment status: Resolved by our Writing Team
  • Source@PrimeWritersBay.com

GET THIS PAPER COMPLETED FOR YOU FROM THE WRITING EXPERTS  CLICK HERE TO ORDER 100% ORIGINAL PAPERS AT PrimeWritersBay.com

• • • • NO PLAGIARISM