Business continuity planning and disaster recovery in healthcare organizations

¶ … New Continuity Manager

What do you think is going on here?

Business continuity planning and disaster recovery capability has become mandatory for all healthcare organizations in the Health Insurance Portability and Accountability Act (HIPAA), passed by the U.S. Congress in 1996, has as part of its phased implementation "Security Guidelines" (Coleman, 2016). The BHS campus undoubtedly has some form of this emergency plan. However, given the reaction by the administrator, to a recent risk that was identified, the current plan is most likely not comprehensive or possibly out-of-date.

How will each potential solution affect organizational culture?

Risk planning and emergency responses need to be deeply embedded in the culture to be effective. The entire staff must not only familiarize themselves with the risk plan, but also be constantly scanning for potential risks or obstacles that might be present in the event a disaster occurs.

What kind of leadership is needed to bring about organizational change?

Given the fact that the hospitals culture will likely have to change for the plan to be most effective, the transformational leadership model would most likely be the best candidate for the implementation of the plan.

What are the various risks associated with the health care industry? In the Chicago area?

The city of Chicago covers 228 square miles and has a population of approximately 3 million and its former mayor Richard M. Daley has stated taht "No mayor can stand here and say that Chicago - or any other city in the world - will never have a terrorist attack," he notes, "but I can state that we have taken steps [since 9/11] that continue to make Chicago as safe as any city can be" (Smith, 2006). The city must not only prepare for terrorist attacks, but also natural disasters and other issues such as a pandemic influenza.

Discuss the main components of a continuity plan for the BHS campus?

The components of the continuity plan must include all of the following general elements (Coleman, 2016)

Mapping of critical business functions to specific computer applications.

Mapping the computer applications to the platform technologies.

Impact of the business cycles (quarter end, year-end) to contingency plans.

Regular update and review of contingency plans.

Clear statement of risk assumption.

Definition of minimum acceptable level of service and detailed actions to get to that level.

Management prioritization and signoff on prioritization recommendations.

In order to preserve the health and safety of the patients, most of the major healthcare infrastructure systems must not be disable for any significant period of time. For example, the back-up power system must be established immediately. The business continuity is not quite as urgent, but should still be defined within the first forty-eight hours.