You CAN manage the challenging & complex risk management issues facing healthcare today!

  • Decrease font size
  • Default font           size
  • Increase font size
Technology Risk Services
Disaster Preparedness PDF Print E-mail
Written by Joshua I Rozovsky   
Thursday, 27 August 2009 21:58

Events such as 9/11, Hurricane Katrina, and the threat of pandemic influenza challenge healthcare organizations and physician practices to develop solutions to maintain patient, employee, and visitor safety during unanticipated events.

Well developed policies and procedures, agreements with other agencies, quality training, facility design, and the careful application of appropriate technologies can help prepare a health care organization or physician practice for disaster.

Healthcare technologies can also become a tool so relied upon that even a slight outage can result in chaos for the un-prepared or under-prepared healthcare organization or medical practice. Likewise, policies and procedures or training programs that don't consider the "impossible" may not adequately prepare an organization for such an eventuality.

The Rozovsky Group can help healthcare organizations and medical practices prepare with educational resources on disaster credentialing, consent to treatment in mass casualty situations, the use of backup telecommunications systems, the use of volunteers, and recommendations for security before, during, and after a major disaster.

Last Updated on Tuesday, 13 October 2009 08:40
 
Amateur Radio and Backup Communications Preparation PDF Print E-mail
Written by Joshua I Rozovsky   
Thursday, 27 August 2009 21:57

Amateur radio operators often provide and invaluable service to healthcare organizations when traditional communications systems fail due to natural disasters, equipment failures, accidents, or intentional events.

Amateur radio operators often have many more means of communicating available in a disaster than other communications systems because their skills and equipment are not dependent entirely on one mode, frequency, type of antenna system, or organization.

Amateur radio operators can use Morse code, the latest low-bandwidth digital communications, VHF / UHF FM voice systems, digital packet radio, and HF voice systems, extending communications anywhere from miles to thousands of miles efficiently and effectively.

With over 650,000 FCC-licensed amateur radio operators (not including "Novice" licensees) in the United States, all of whom have had to pass exams on radio communications regulations and electronics, many Homeland Security bodies and healthcare organizations are installing amateur radio stations in their emergency operations centers and credentialing licensed  volunteers from the community to operate as healthcare communicators.

The Rozovsky Group can assist healthcare organizations develop a plan for including amateur radio in disaster management plans and ensuring that the use of ham radio complies with regulations including HIPAA and FCC Part 97, which otherwise preclude the use of amateur radio communications for business purposes, or its use by facility employees.

Last Updated on Tuesday, 13 October 2009 08:43
 
Telecommunications Systems PDF Print E-mail
Written by Joshua I Rozovsky   
Thursday, 27 August 2009 21:56

As healthcare becomes increasingly dependent on telecommunications and information systems (IS or IT) in the march towards more patient-centered, efficient care - and the mandate to adopt electronic record-keeping, new challenges are arising.

Privacy concerns, security of networks, and vulnerability of complex systems to natural or man-made events such as power interruptions or surges are just some of the concerns.

Joshua Rozovsky, a consultant with The Rozovsky Group has written on Radio Frequency Identification (RFID) in healthcare, including in Healthcare Organizations Risk Management:  Forms, Checklists and Guidelines, Third Edition (ASPEN 2009) and the Enterprise Risk Management Handbook for Healthcare Entities (AHLA 2009). He holds a Masters in National Security and Public Safety with a concentration in Information Protection, and RFID+ certification.  Joshua holds additional certifications for A+, Network+ and FCC licenses for Amateur Radio (Extra-class) and commercial telecommmunications systems (GMDSS Operator / Maintainer with ship radar endorsement).

He has also attended training on lightning protection systems and their certification from Underwriters' Laboratories.

Last Updated on Tuesday, 13 October 2009 08:40
 
Information Security PDF Print E-mail
Written by Joshua I Rozovsky   
Thursday, 27 August 2009 21:55

alt

Information security does not just mean keeping prying eyes away from confidential records, or ensuring that the HIPAA Security Rule is implemented.

Information security includes:

  • Confidentiality - ensuring the secrecy of data
  • Integrity - Is the information accurate? Has it been corrupted intentionally or by glitch?
  • Availability - Patient safety and facility operations depend on patient records and other information being accessible when needed

The Rozovsky Group offers education and consulting services to management, information services specialists, legal counsel, and insurers on information security technologies and strategies guided towards facilities along the continuum of care.

Last Updated on Monday, 08 February 2010 11:59
 
Electronic Records, e-Discovery, Embedded Devices PDF Print E-mail
Written by Joshua I Rozovsky   
Thursday, 27 August 2009 21:54

As part of an enterprise risk management(ERM) approach, healthcare organizations and physicians practices need to develop practical approaches for using electronic information.  With a national impetus for the adoption of electronic medical records (EMR), electronic health records (EHR) and personal health records (PHR), it is important to define the scope of what constitutes a legal health record.  What information should be maintained?  How will informaiton be archived?  What is the plan for responding to requests under federal and state  "e-Discovery" requirements? Does the plan contemplate data generated by embedded devices and smart pumps? Using an ERM approach, The Rozovsky Group works with clients to develop and implement plans, policies, procedures, and training needed to addressing these issues.

Being poised for data breach and identity theft requirements from both the FTC and HHS, are part of the ERM consulting  approach offered by The Rozovsky Group.
Last Updated on Saturday, 29 August 2009 15:42
 


News from the Web

[1/1] CDC Emergency Preparedness and Response: What's New
An RSS feed of new postings to the EPR site.

[1/3] UPDATED: Gulf Oil Spill 2010 Health Surveillance

[2/3] NEW: CDC Response to the Gulf of Mexico Oil Spill

[3/3] UPDATED: Gulf Oil Spill 2010 Health Surveillance
[1/1] SANS Institute Security Awareness Tip of the Day


[1/3] Revoking security access isn't always enough

[2/3] Secure your Wireless Router

[3/3] Choose a password that's hard to crack
[1/1] CDC's Public Health Law News
Weekly digest of happenings around the world pertaining to law and the public's health.

[1/3] Announcement: Disease, Disaster, Bioterrorism Report

[2/3] Announcement: 2008 National Obesity Summit

[3/3] Announcement: Isolation and Quarantine Training
[1/1] GAO Saved Search : "National Institutes of Health" +"risk management"


[1/2] Herbal Dietary Supplements: Examples of Deceptive or Questionable Marketing Practices and Potentially Dangerous Advice, May 26, 2010

[2/2] National Institutes of Health: Completion of Comprehensive Risk Management Program Essential to Effective Oversight, September 11, 2009
[1/1] AHA What's New
What's New on aha.org.

[1/4] Advisory : Hospital Compare: New Hospital-Acquired Conditions Data

[2/4] Letter : AHA Comments to the FCC Re: Rural Health Care Support Mechanism

[3/4] Letter : AHA Letter to DOJ and HHS re enforcement initiatives under the auspices of the False Claims Act

[4/4] Letter : AHA Comments to CMS Re: OPPS, ASC, GME, costs and Physician Self-Referral Proposed Rule for 2011