Best practices to enable clinician mobility for patientcentered

Transcription

1 Best practices to enable clinician mobility for patientcentered healthcare Strategies, solutions and realworld examples for transforming healthcare IT without sacrificing security or compliance.

2 2 Mobility is transforming healthcare as clinicians embrace new devices and ways of working to deliver better care, more quickly, to patients anywhere. Now, clinicians of every generation want to access their apps and information on any device even those purchased personally over any network. The benefits of mobility for healthcare are clear. With faster access to applications as well as electronic health records (EHRs), clinicians can make better-informed decisions and recommendations more quickly to improve patient outcomes. Practitioners can choose the right device for each situation a tablet at a patient s bedside, a workstation in a prep room, even a smartphone while between locations all with complete access to their apps and information. Business staff gain new flexibility to work their way, and healthcare organizations can reduce costs, streamline workflows and enable the delivery of care in more places than ever. For IT, this new model for healthcare poses two key challenges: how to ensure a consistent and convenient experience as clinicians and other employees roam across locations, devices and networks; and how to accommodate and adapt to this new workstyle without sacrificing security, patient privacy, regulatory compliance and IT manageability. As a leader in mobile workstyles, Citrix has developed proven best practices for supporting mobility and bring-your-own-device (BYOD) strategies in healthcare, providing a structured approach to empower clinicians while ensuring compliance and patient privacy. Citrix healthcare solutions enable any-device access while helping healthcare organizations maintain security, control and manageability, and help clinicians work together more effectively across locations and organizations to create seamless communities of care. This paper offers guidance for healthcare organizations seeking the benefits of a more mobile environment, including: Five best practices for allowing the use of personal and mobile devices in the organization, including consumer devices purchased directly by clinicians Technologies to securely deliver information to highly mobile clinicians; establish a secure approach for the delivery of applications, desktops and information; and provide a secure, compliant way to share information and collaborate on patient-centered care Real-world examples of six healthcare organizations that are already seeing the benefits of secure mobility for their clinicians, staff and patients

3 3 Healthcare organizations embrace mobility to deliver better care, more efficiently Mobility brings powerful benefits for clinicians, healthcare organizations and patients alike. Doctors and nurses can log in to any station quickly, easily and securely and access a consistent desktop environment and session everywhere they go. No longer tied to traditional desktops and computers-on-wheels, they can carry mobile devices on their rounds. They can also access clinical systems and vital patient data just as easily from beyond the hospital even on their own personal laptops, smartphones and tablets to respond to their patients needs, make fully informed decisions, prescribe medicine and relay instructions to hospital personnel. Throughout healthcare communities and newly formed Accountable Care Organizations (ACOs), professionals can more easily share information, collaborate with care teams and communicate with patients and their families. With the flexibility to experience work and life in harmony, clinicians can avoid burnout and stay at the peak of their capabilities, while their organizations can better retain skilled, in-demand medical professionals. As healthcare organizations consolidate into connected communities of care, the same technologies which power mobility make it simpler to bring new facilities and groups into the environment. Instead of having to wait until time-consuming network integrations are complete, organizations can provide secure access to applications and data almost instantly, ensuring continuity for patients while allowing time to complete the consolidation properly. Healthcare providers can deliver care to patients remotely to enable telemedicine, and organizations can homesource some medical professionals and business staff to increase flexibility while reducing on-site costs. Mobility can help healthcare organizations address key industry challenges, including: Improving care Organizations can increase clinician productivity, patient interaction and quality of care through seamless mobile access to clinical applications and information Increasing operational efficiency Care providers, administrators and business staff can get more done, in more ways, more quickly Empowering collaborative, patient-centered care Clinicians throughout the care chain can use mobile devices, laptops and other devices to securely connect and collaborate across organizations and locations While organizations throughout the healthcare industry are quickly forming a consensus around the benefits of mobility, there has been less consistency in the way it is enabled. At many organizations, doctors start bringing in their own personal devices to use in their work, before IT has had a chance to develop complete, coherent policies around mobility and consumerization. This can lead to significant risks in particular:

4 4 Security and compliance gaps IT is unable to ensure consistent data protection, the privacy of personal health information (PHI), compliance with HIPAA and other regulations, and safeguards against device theft or loss Escalating IT complexity IT faces new challenges to manage and deliver applications and data to a proliferating array of platforms, and must determine how various user devices will be supported These risks are escalated due to the complexity of personal use cases and the richness of personal devices. Cameras allow scanning, but also record confidential information. Outside networks allow the healthcare professional to work from anywhere, but reduce visibility and control over traffic. Data sharing services assure that needed files are always available, but consumer-focused services don t offer enterprise-grade security features. This is the imperative for healthcare IT: to enable the full benefits of mobility, while minimizing the potential risks it can involve. A five-step approach for embracing mobility and consumer devices in your organization The principles for successful mobility and BYOD are simple: People can choose any device for work, including the same devices they use in their personal lives, and can move seamlessly across personal and corporate-issued devices. IT gains a simple way to deliver on-demand data, applications and desktops to any device over any connection, while maintaining uniform and efficient security, policy enforcement, compliance and control. To reap the benefits of BYOD while avoiding potential risks, you need to develop a structured strategy addressing the people, policies and technologies involved. These five simple steps provide a rational approach to plan, define and roll out a BYOD initiative in your healthcare organization. Step 1 Understand industry best practices Mobile devices already play a central role in many healthcare organizations, which have had to rethink traditional IT best practices to enable their secure use. While organizations have in the past tended to focus on controlling devices, the latest best practices expand beyond device management to address the management of apps and data that clinicians access as they move from hospital room to office to clinic. As an expanding array of healthcare applications becomes available, from internal legacy applications to SaaS and mobile apps, care providers must be able to quickly and easily access every resource they need on any device so they can stay focused on their patients. With enterprise mobility management, IT can allow people to do more with their mobile devices than would be possible or feasible through a solely device management-based approach.

5 5 Step 2 Get stakeholder buy-in While most healthcare industry professionals have at least an anecdotal appreciation of the growing role of mobility, they may not fully understand how important it has become or appreciate the urgency of introducing more coherent and comprehensive policies around it. Key constituents and employees across areas including IT, security, HR and legal, as well as key medical personnel such as the chief medical officer and chief nursing officer, should be engaged early in the process to discuss the organization s needs, serve as the champion with clinicians, and help define policies for the use of mobile and consumer devices, whether corporate-owned or BYOD. Clinicians, administrators and business personnel should also be surveyed to get a feel for their level of interest, needs and preferences. Step 3 Define your organization s policy Your policy should aim to empower clinicians with mobile access to the resources they need to deliver optimal care, and provide business staff with similar mobility and flexibility, to help your organization deliver patient-centered care more efficiently. At the same time, you need to protect the organization and the privacy of its patients and educate people on the responsible use of personal devices for work purposes. Your BYOD policy should address areas including employee eligibility, allowed devices, service and app availability, device and user support, cost sharing, security and compliance, and legal terms of use. Step 4 Develop your technology strategy The technologies needed to simplify and securely enable mobility on any device include enterprise mobility management, desktop and app virtualization, file sharing, social collaboration, remote support and cloud networking. These solutions are discussed in detail in the next section of this paper. Step 5 Prepare for a successful rollout To drive successful adoption, you should formalize your rollout plan and create resources that make it simple for clinicians and other employees to learn about mobility and access everything they need to get started. For BYOD, this should include setting up enrollment procedures, providing tools that enable selfprovisioning, and establishing support and maintenance levels. Solutions for empowering clinicians and staff with secure mobility For clinicians, administrators and business personnel to reap the full benefits of mobility, IT needs to provide secure access to applications, complete clinical desktops and data and file access on any device, from any location inside or outside the hospital network. They also need to be able to collaborate easily with colleagues, both inside and outside the organization, and access and receive support no matter where they are working. To ensure security, IT needs complete capabilities for enterprise mobility management (EMM) and network security.

6 6 Citrix healthcare solutions help organizations embrace mobile workstyles and cloud services to improve both patient care and organizational performance while ensuring compliance, privacy and the security of data. Complemented with broad partnerships and proven expertise, Citrix solutions address every requirement for secure mobility and the use of consumer devices in healthcare. Enterprise mobility management (EMM) With Citrix XenMobile, IT can empower clinicians, administrators and business executives with single-click secure access to mobile, web, SaaS, datacenter and Windows applications from a unified app store on any device. Single signon lets people roam easily across devices and networks throughout the day as they move among facilities and offices. IT gains identity-based provisioning and control of apps, data and devices, automatic account de-provisioning for terminated users and selective wipe of lost devices. IT can enroll and manage any device, detect jailbroken devices and perform a full or selective wipe of a device that is out of compliance, lost, stolen or belongs to an employee who has left the organization. Application security is ensured through secure application access via app tunnels, blacklisting, whitelisting and dynamic, context-aware policies. Network security capabilities provide visibility into and protection against internal and external mobile threats; blocking of rogue devices, unauthorized users and non-compliant apps; and advanced mobile threat analysis through integration with security information and event management (SIEM) systems. As a result, IT can provide people with freedom of choice in the devices they use while ensuring compliance and patient privacy. Windows app and desktop virtualization Citrix application and desktop virtualization technology, powered by Citrix XenDesktop and Citrix XenApp, centralize the management and delivery of Windows applications such as EHR systems, CPOE and PACs imaging apps, and legacy custom applications as well as clinical and office staff desktops. Applications and associated data remain secure in the datacenter, where they are accessed through granular, policy-based user authentication. Real-time network and performance optimization technologies ensure a high-definition experience regardless of location, device and network connection. A convenient singlesign on experience ensures optimal convenience and productivity as clinicians roam seamlessly across locations, devices and networks, while multi-factor authentication ensures security. Partner technologies enable tap-in, tap-out authentication for fast, secure access in any scenario. Compliance with HIPAA and other regulations is supported through behind-the-firewall desktop and application processing; standards-based encryption; secure remote access; password expiry management; enhanced event logging; multi-factor authentication; and web application firewall.

7 7 Secure file sharing To coordinate care and ensure continuity for patients, healthcare professionals need a simple, secure way to share information across the healthcare delivery chain, including clinicians, administrators and ancillary clinical service providers at hospitals, home healthcare organizations, long-term care facilities and other locations. Citrix ShareFile lets people securely share files such as lab results and consult notes as well as medical procedure and hospital processes information with anyone inside or outside their organization. Users can also sync files across all of their devices for seamless roaming from anywhere. Policy-based access control, auditing, reporting and remote device wipe help keep patient data and other sensitive content secure while facilitating compliance. Collaboration Citrix GoToMeeting facilitates collaboration among peer practitioners, with medical experts and across partner organizations by making it simple to initiate or join meetings from anywhere in seconds, on any device, with HD video for true face-toface interaction. Clinicians can also consult remotely with patients in any location, enabling telehealth and extending the reach of the healthcare organization. Similarly, Citrix GoToWebinar and Citrix GoToTraining enable healthcare experts to conduct larger seminars or training sessions, such as ongoing EHR training, online. Citrix Podio provides collaboration capabilities such as social activity streams, custom apps and collaborative workspaces for patient support groups, business staff and other non-clinical users. Remote support As healthcare organizations grow to encompass an expanding array of facilities and care models, Citrix GoToAssist makes it possible for IT to centrally support people and technologies in any location to ensure uptime for PCs, Macs, mobile devices, servers and networks across the organization. Secure cloud networking Citrix NetScaler and Citrix NetScaler Access Gateway enable IT to optimize, secure and control the delivery of healthcare apps, cloud services, virtual desktops and mobile services. A unified management framework provides load balancing, global traffic management, security, data scaling, app visibility and desktop delivery to help healthcare organizations grow, while consolidating datacenters to minimize risk and costs. Access control, auditing and reporting help IT manage compliance, information governance and data protection. As healthcare organizations seek to increase IT efficiency and integrate acquired providers while minimizing cost, NetScaler makes it possible to consolidate critical network services on a single hardware appliance with no loss of performance, and meet diverse application needs in a multi-tenant environment.

8 8 Six healthcare organizations realize the benefits of secure mobility The impact of mobility on healthcare can already be seen in a growing number of organizations. Care providers log into virtual desktops and apps and online data from any location, on any device including their own personal smartphones and tablets to use clinical systems such as EHR systems, labor and delivery monitoring systems, X-rays, EKGs and other real-time data sources. Detailed health records can be shared easily across communities of care, including patient information, test data, medical images and videos, and other data, to ensure continuity and improve long-term outcomes. High-definition technology makes clinical materials as well as imaging and teaching materials more usable, helping clinicians make better decisions, which in turn help lower the cost of care. For hard-working clinicians, mobility also means the ability to finish documentation and sign off on charts at their own convenience, such as taking care of it at home instead of working late at the hospital. Meanwhile, healthcare organizations can more quickly and easily form connected communities of care, improving both their business performance and the results they deliver for their patients. Consistently ranked as a top U.S. hospital, Hennepin County Medical Center (HCMC) in Minnesota focuses on both excellence in care and careful financial stewardship, which makes it possible to serve uninsured and low-income patients. HCMC uses Citrix healthcare solutions to offer employees and clinicians the ability to use any device, anywhere, to access high-performance apps, desktops and enterprise data. By centralizing desktop application management, HCMC increases IT efficiency while ensuring the end-to-end security necessary to meet HIPAA requirements. Understanding that the best patient outcomes result from timely, well-informed decisions, Kaweah Delta Medical Center (KD) in Central California focuses on the six rights : getting the right information to the right person, at the right place, at the right time, in the right format, to ensure the right value. The hospital used Citrix healthcare solutions to create MyKD, a complete virtual desktop which can run on any type of computer, mobile or otherwise, from PCs to thin clients to tablets and smartphones. With 75,000 employees and $6 billion in revenue, Kindred Healthcare is growing quickly through acquisitions designed to create connected communities of care. By using Citrix healthcare solutions to rapidly integrate additional healthcare providers into its organization, Kindred can help people get care more easily even as their medical needs change by moving seamlessly among a diverse enterprise of hospitals, rehab centers, nursing homes and other facilities.

9 9 Miami Children s Hospital (MCH) uses a Citrix-powered telehealth platform to help doctors its own as well as others around the world apply the latest advances in specialized pediatric medical care to improve outcomes and save children s lives. Clinicians at MCH can log into apps and desktops quickly and securely on any device to access the information they need to guide the care they provide. MCH s doctors also use the platform to consult remotely with hospitals around the world, making its advanced expertise available to patients who may be hundreds of miles from the nearest subspecialists. The Medical University of South Carolina (MUSC) provides healthcare services to patients locally while supporting doctors and research around the world. Facing huge reductions in funding, the university uses Citrix healthcare solutions to virtualize its infrastructure making it possible to improve delivery of IT services while improving efficiency and dramatically reducing cost. With more than 300 apps accessible on any device, anywhere, patients in both urban and rural communities can benefit from the latest advances in medical knowledge. As a world-class healthcare organization, Seattle Children s Hospital makes extensive technology resources available to its staff, from electronic medical records to databases of clinical information to real-time patient monitoring systems. Citrix healthcare solutions help Seattle Children s Hospital provide a faster, more mobile, and fully transparent computing experience for its practitioners at a lower cost so they can focus on what matters most: the health of the children they serve. Conclusion Clinician mobility already plays a central role in healthcare, and its importance will continue to increase as organizations seek to deliver better care, more efficiently. Citrix healthcare solutions, complemented with proven best practices, enable the transformation of healthcare IT to let clinicians and other practitioners securely access the resources they need wherever they are, on whatever device best suits their needs without jeopardizing regulatory compliance, patient privacy or data security. Able to tap into applications, patient records and clinical information more quickly, practitioners can make better decisions and recommendations sooner to improve care. More effective collaboration across healthcare providers and facilities enables truly patient-centered care, often improving long-term outcomes and ensuring a better experience for patients. By enabling clinicians and staff to access resources more quickly, wherever they are needed, organizations become better able to adopt new treatments and models for care delivery. For more information about Citrix solutions for healthcare, please visit

10 10 Additional resources Best Practices to Make BYOD Simple and Secure The 10 Must Haves for Secure Enterprise Mobility Bring-Your-Own Device Starter Kit Refactoring Sensitive Data Access: The Benefits of Desktop Virtualization for Security Corporate Headquarters Fort Lauderdale, FL, USA Silicon Valley Headquarters Santa Clara, CA, USA EMEA Headquarters Schaffhausen, Switzerland India Development Center Bangalore, India Online Division Headquarters Santa Barbara, CA, USA Pacific Headquarters Hong Kong, China Latin America Headquarters Coral Gables, FL, USA UK Development Center Chalfont, United Kingdom About Citrix Citrix (NASDAQ:CTXS) is the cloud computing company that enables mobile workstyles empowering people to work and collaborate from anywhere, accessing apps and data on any of the latest devices, as easily as they would in their own office simply and securely. Citrix cloud computing solutions help IT and service providers build both private and public clouds leveraging virtualization and networking technologies to deliver high-performance, elastic and cost-effective services for mobile workstyles. With market-leading solutions for mobility, desktop virtualization, cloud networking, cloud platforms, collaboration and data sharing, Citrix helps organizations of all sizes achieve the kind of speed and agility necessary to succeed in an increasingly mobile and dynamic world. Citrix products are in use at more than 260,000 organizations and by over 100 million users globally. Annual revenue in 2012 was $2.59 billion. Learn more at Citrix Systems, Inc. All rights reserved. Citrix, XenDesktop, XenApp, ShareFile, GoToMeeting, GoToAssist, Podio XenMobile, NetScaler Access Gateway, GoToWebinar and GoToTraining are trademarks of Citrix Systems, Inc., or a subsidiary thereof, and are or may be registered in the U.S. Patent and Trademark Office and other countries. All other trademarks are the property of their respective owners. 0413/PDF