IT S ABOUT TIME REMOVING TECHNOLOGICAL BARRIERS TO IMPROVE PATIENT CARE. Enabling Healthcare. Securely

IT S ABOUT TIME REMOVING TECHNOLOGICAL BARRIERS TO IMPROVE PATIENT CARE Enabling Healthcare. Securely

IN AN AVERAGE DAY A CARE PROVIDER CAN LOG IN TIMES PER DAY THAT S MINUTES OF UNNECESSARY CLICKS

WE REPLACE MANUAL ENTRY OF USERNAMES AND PASSWORDS WITH IMPRIVATA OPTIMISES CLINICAL WORKFLOWS BY REMOVING TECHNOLOGY BARRIERS 1 SIMPLE SOLUTIONS TO COMPLEX PROBLEMS THE HEALTHCARE SECTOR FACES PRESSURES ON SEVERAL FRONTS: PEOPLE ARE LIVING LONGER; THEIR HEALTHCARE NEEDS ARE BECOMING MORE COMPLEX; REGULATIONS AND TARGETS CONTINUALLY CHANGE; AND ORGANISATIONAL POLICIES AND SYSTEMS STRUGGLE TO KEEP PACE. IN ALL OF THIS, CLINICIANS HAVE TO PROVIDE THE VERY BEST IN EFFICIENT PATIENT CARE, WHILE THE REST OF THE ORGANISATION MUST SUPPORT THEM. Information Technology is a critical solution to meeting these pressures head on. By removing paper and manual processes, IT helps improve security, ensure compliance and ultimately improve patient care. But the world isn t always that simple. Often, there just isn t enough time or resource; and in a fragmented IT environment, access to multiple systems, badly integrated data and a myriad of security features can be a hindrance to the day job. From doctors in hospitals to policymakers to patients, healthcare organisations want to realise the proposed benefits of IT, without feeling like it is getting in the way. Unified, secure and seamless access to data saves time and allows clinicians to focus on the patient. And this all starts with simplifying the process by which clinicians interact with IT: desktop access and application sign on.

TECHNOLOGY SHOULD BE AN ENABLER FOR, NOT A BARRIER AGAINST QUALITY HEALTHCARE. COLLECTIVELY WE MUST STREAMLINE IT ACCESS TO CLINICIANS AND DRIVE CLINICAL PRODUCTIVITY FOR BETTER PATIENT CARE. Omar Hussain, President & CEO of Imprivata 2 HOW TECHNOLOGY CAN REALLY HELP Healthcare technology should deliver financial, clinical and efficiency benefits without getting in the way of providing the very best in patient care. It s all about saving time and improving access to data and systems. Healthcare environments are unique and complex. They require solutions that work with care providers whatever the workflow, application or desktop to deliver financial and efficiency benefits, ensure compliance and improve patient care. Authentication management and single sign-on solutions cut through complexity and remove the barriers between clinicians and the IT systems they need to access. This makes it easier for healthcare professionals to navigate complex clinical workflows, across different departments and locations. The critical first step in achieving this goal is to allow clinicians free and seamless access to information, without getting in the way of their work. This can be done in four ways: CONVENIENCE Replacing manual entry names and passwords with No Click Access to desktops and applications PRODUCTIVITY Keeping authorised users of information productive and eliminating interruptions SIMPLICITY Optimising clinical workflows by introducing seamless technology solutions that improve current process TIME Saving it for you, so you can spend it on patient care Imprivata has a proven track record in helping healthcare organisations remove the barriers to effective IT use. In this way we have helped: Finance departments save money and improve return on investment in technology IT Departments improve security and usage while reducing the amount of time on password administration Compliance teams track information access for reporting purposes Free up hours of clinician time a week by removing manual and complicated access After all, it s all about time enhancing care delivery by providing fast, secure access to patient information.

3 SIMPLIFYING HEALTHCARE SECURELY Over the past ten years, we at Imprivata have built a deep understanding of how healthcare departments operate. We help healthcare professionals save time by providing fast, secure access to patient information. Our mission is for healthcare professionals to spend less of their valuable time dealing with technology and more time caring for patients. We work closely with our customers to develop authentication management and sign-on solutions that improve the work environments of healthcare professionals both inside and outside healthcare facilities.

WHAT OUR CUSTOMERS SAY... IMPRIVATA HAS BEEN HUGELY SUCCESSFUL IN HELPING CLINICAL STAFF ACCESS IT SYSTEMS QUICKER AND MORE EFFICIENTLY, WHICH, IN TURN MEANS MORE TIME FOR PATIENT CARE. Nicola Ellingham, Project Manager, East Kent Hospitals University Trust 4 SINGLE SIGN-ON WHY LOG ON SEVERAL TIMES A DAY, WHEN YOU CAN AUTOMATE THE PROCESS SECURELY? WHY IT MATTERS Healthcare professionals need fast and secure access to patient information so that they can deliver the very best in patient care. But multiple sign-ons, lost passwords and manual entry waste clinicians and the IT department s time. Removing the need to remember and enter multiple application usernames and passwords, eliminates interruptions and improves productivity. HOW WE HELP Single Sign-On simplifies application log in and log out, automating username and password entry for authenticated users to critical applications. As a result workflows are optimised and can be combined with authentication management to enable No Click Access to desktops and applications.

5 AUTHENTICATION MANAGEMENT NO CLICK ACCESS FOR A MOBILE CLINICAL WORKFORCE WHY IT MATTERS Every desktop in your workplace is an access point for patient information but authentication occurs in many places beyond desktops and applications, such as application modules, order signing, documentation signing, medication reconciliation or eprescribing. Authentication management handles all point of authentication to provide healthcare professionals with a consistent user experience and saves time to more time can be spent on care delivery. HOW WE HELP We combine authentication management on the desktop with single sign-on to applications to create what we call No Click Access the ability to for clinicians to access their key applications quickly and easily with just the tap of a proximity card. WHAT OUR CUSTOMERS SAY... WITH THE HELP OF IMPRIVATA, WE HAVE ALREADY SOLVED SECURITY AND WORKFLOW CHALLENGES IN OUR EMERGENCY DEPARTMENT, AND WE ARE COMMITTED TO EXTENDING THE PROJECT ACROSS A BROAD RANGE OF MOBILE DEVICES IN USE AT OUR SITES TO MAKE LIFE AS EASY AS POSSIBLE FOR OUR CLINICAL USERS, WHICH ULTIMATELY BENEFITS THE STANDARD OF CARE THAT OUR PATIENTS RECEIVE. Dr Eder, head of quality management and IT at Klinikum Wels

WHAT OUR CUSTOMERS SAY... AT DONCASTER AND BASSETLAW HOSPITALS, WE ARE CONSTANTLY LOOKING FOR WAYS TO IMPROVE OPERATIONAL PROCEDURES IN ORDER TO ENHANCE THE STANDARD OF PATIENT CARE THAT WE ARE ABLE TO PROVIDE. SECURITY AND PRODUCTIVITY BENEFITS HAVE BEEN CLEARLY VISIBLE SINCE THE PROJECT BEGAN. Neil Racher, Senior IT Project Manager, Doncaster and Bassetlaw Hospitals 6 CASE STUDY SAVING STAFF TIME DONCASTER AND BASSETLAW HOSPITALS CHALLENGE Serving a population of over 410,000, the staff at Doncaster and Bassetlaw NHS Foundation Trust need daily access to over 40 healthcare applications. A fast-paced working environment meant that staff were prone to sharing passwords and even user accounts in order to achieve quick access to critical data, significantly reducing the effectiveness of these security measures. In addition, forgotten passwords became a common problem forcing staff to make time consuming and costly calls to the password reset helpdesk, causing losses in productivity and efficiency. Doncaster and Bassetlaw NHS Foundation Trust needed a bespoke solution to tackle these issues. SOLUTION Imprivata provided an identity and access management appliance which gives secure authentication to applications including patient data. To tackle the specific issues, a Self-Service Password Reset function was installed. This allowed users to take charge of their own password resets. BENEFITS The product rollout has strengthened user authentication, streamlined application access and simplified compliance reporting. The temptation for users to share passwords and accounts has been negated which has improved security, and the speed at which end-users can access patient data has increased, leading to productivity and patient care improvements. The Self Service Password Reset feature has also meant that password lock-outs are no longer an issue for staff working outside of IT helpdesk hours, further improving the efficiency of access across the hospital s multiple sites.

CASE STUDY INCREASING CLINICIAN WORKFLOW EFFICIENCY OXFORD UNIVERSITY HOSPITALS NHS TRUST 7 CHALLENGE The Oxford University Hospitals NHS Trust (OUH) is one of the country s largest hospital Trusts with 11,000 employees. The Nicholson Challenge is demanding the NHS to save 20 billion by 2015, forcing trusts to closely examine working practices and find areas to make more efficient. Achieving these savings whilst improving service quality requires a careful strategy and the OUH had already identified the adoption of an organisation-wide electronic patient record as an important tool to support this. The NHS security infrastructure built on a national authentication application using proximity cards and card readers on every computer presented challenges. The national infrastructure did not cater for busy clinicians in areas where rapid login, user-switching and session roaming would be critical, especially in the complex and frantic workflow of an Accident and Emergency (A&E) department. SOLUTION To support the need for very slick and quick logins, user switching and desktop roaming, the existing OneSign implementation was deployed to provide a Tap and Go No Click Access to virtual desktops in the department. By tapping a card and entering a PIN at the start of a shift, a user is authenticated and a virtual desktop is auto-launched. Access to applications for which the user is authorised is available until the user taps their card to suspend their session and disconnecting from the virtual desktop securely. When that clinician roams to another desktop, the user s virtual session is launched automatically with the tap of a card as it was left running at the previous desktop. BENEFITS A&E workflows have been vastly improved, and in turn, clinician satisfaction has increased. The need to manually enter log-in credentials for each session is eliminated, which is highly beneficial to staff who are constantly on the move while treating patients. Removing this IT distraction has proven invaluable to the end users, who are now better supported by IT to do their jobs.

8 SELF-SERVICE PASSWORD MANAGEMENT DRAMATICALLY REDUCE IT HELPDESK CALLS WHY IT MATTERS Forgotten passwords are a common problem and generate a high volume of help desk calls, with up to 90% of helpdesk calls being related to password resets. This forces the helpdesk to spend valuable time and resources on the same low-value, repetitive tasks. Removing password resets from your IT staff s to-do list cuts costs and frees up time and resources to focus on critical (and more strategically valuable) projects. HOW WE HELP Self-Service Password Management offers healthcare professionals a fast, easy and secure way to reset and retrieve forgotten passwords without calling the help desk. It saves valuable time for both end users and IT staff. WHAT OUR CUSTOMERS SAY... NHS SCOTLAND IS COMMITTED TO ENSURING THE HIGHEST LEVELS OF DATA SECURITY WHILE ENABLING ALL EMPLOYEES TO WORK AS EFFICIENTLY AS POSSIBLE TO DELIVER HIGH QUALITY PATIENT CARE IMPRIVATA DEMONSTRATED THE IMPORTANCE OF UNDERSTANDING THE COMPLEXITIES IN PATIENT AND CLINICIAN WORKFLOW, ENSURING THAT OUR PATIENT DATA REMAINS HIGHLY SECURE, AND THE NEED FOR MAXIMISING THE TIME AVAILABLE BETWEEN PATIENT AND CLINICIAN. Ronnie Monaghan, Head of e-health Programme at NHS Fife

9 TRANSACTION AUTHENTICATION NO-CLICK TRANSACTION AUTHENTICATION WHY IT MATTERS Every desktop in your workplace is a potential access point for patient information. Transaction authentication management allows you to positively identify a healthcare professional at any point in the workflow through multi-factor authentication methods. This authentication mandates a clinician to re-authenticate to enable auditing, safeguard patient care and ensure compliance. HOW WE HELP Our transaction authentication is embedded directly into the 3rd party application workflow (clinical and administrative applications) and is prompted based on seamless integration into the API level of the workflow. Clinicians re-authenticate using locally defined authentication methods as required. For example, a tap and go re-authentication can be created whenever a user tries to prescribe a non-formulary drug or request a particular test, whereas a biometric re-authentication can be prompted for a potential adverse drug interaction.

WHAT OUR CUSTOMERS SAY... AT THE OXFORD UNIVERSITY HOSPITALS, WE WERE ALREADY SEEING THE FLEXIBILITY AND MANAGEMENT BENEFITS OF USING VDI. HOWEVER, WE NEEDED A SECURE SINGLE POINT OF ACCESS TO BOTH THE VIRTUAL DESKTOP AND THE APPLICATIONS THEREIN WITHOUT DISRUPTING WORKFLOWS. THIS WAS ESSENTIAL FOR CLINICIANS WHO RIGHTLY FOCUS ON PATIENT CARE AS THEIR ABSOLUTE PRIORITY, AND WHO THEREFORE NEED TO HAVE THE MOST UNOBTRUSIVE IT AND SECURITY SYSTEMS IN PLACE TO SUPPORT THE HIGH QUALITY CARE. Dr Paul Altmann, CCIO (Chief Clinical Information Officer) at the OUH NHS Trust. 10 VIRTUAL DESKTOP ACCESS IMMEDIATE INFORMATION ACCESS FROM ANY DEVICE WHY IT MATTERS Healthcare professionals are often on the move. Every time they change location, they have to log into the workstation, launch the previous clinical or administrative applications and navigate back to the patient record. This wastes valuable time and shifts focus away from spending time with the patient. HOW WE HELP Imprivata No Click Access combines with the benefits of virtual desktop roaming to provide clinicians with access to their personal desktop from any location. With just the tap of their badge clinicians can access their virtual desktop as they move around the hospital without the need to relaunch applications or navigate to patient information, giving healthcare professionals immediate access to information. Exactly as they left it on the previous terminal. Imprivata works with both leading virtualisation providers, Citrix and Vmware, and is integrated directly onto the hardware chip of many thin- and zero-client partner manufacturers. Enabling out of the box access to Single Sign-On and Authentication Management simplifies greatly the deployment and maintenance for IT departments.

11 WALK-AWAY SECURITY VISUAL RECOGNITION PUTS AN END TO UNWELCOME PRYING EYES WHY IT MATTERS The security of patient data is paramount and in a busy and open healthcare environment it can be challenging to protect patient data on workstations. The time spent logging in and out leaves less valuable time to care for patients and clinicians called away to emergencies may leave workstations vulnerable to unauthorised access. By increasing the risk of data breaches and unauthorised access, this situation can impact compliance and patient safety regulations. HOW WE HELP By initially fading the screen to protect patient information and then automatically locking workstations when healthcare professionals leave their workstation through walk-away security. Camera-based, active presence detection and facial recognition eliminates the need to manually lock workstations and allows for re-authentication upon return to exactly the point where they left off.

12 CASE STUDY REMOVING BARRIERS TO BETTER PATIENT CARE NEWCASTLE UPON TYNE HOSPITALS NHS FOUNDATION TRUST CHALLENGE Remembering multiple passwords for numerous applications proved problematic for staff who would resort to writing down logins or would forget and be locked out of applications at Newcastle Upon Tyne Hospitals NHS Foundation Trust. Each user had to carry three proximity cards to access IT and building resources. The Trust was also undergoing a major building project so any improvement would need to integrate with the Trust s new building access systems and strengthen overall security. SOLUTION Working with a local service partner, the Trust chose Imprivata. Across the Trust, clinical and non-clinical staff were issued with strong authentication via the NHS proximity card which combined chip and pin and proximity functionality. BENEFITS Staff now benefit from easy authentication management with single sign-on access to all applications. This has led to improved user satisfaction, wider IT adoption and reduced workload for the IT helpdesk. The increased control and management of user credentials has led to improved security and compliance. WHAT OUR CUSTOMERS SAY... THIS PROJECT IS PROVING TO BE POPULAR WITH BOTH THE IT HELPDESK TEAM AND THE GENERAL USER POPULATION. STAFF WILL NOW ONLY HAVE TO USE ONE CARD FOR ALL THEIR ACCESS NEEDS, USING ONLY ONE PASSWORD, SAVING TIME AND INCREASING PRODUCTIVITY, WHILST AT THE SAME TIME IMPROVING OUR OVERALL SECURITY. Richard Oliver, IT Security Manager, Newcastle Upon Tyne Hospitals NHS Foundation Trust

WHAT OUR CUSTOMERS SAY... IMPRIVATA PROVIDES US WITH SINGLE SIGN-ON AND STRONG AUTHENTICATION FOR OUR CLINICAL AND NON-CLINICAL STAFF, MAKING THEIR EVERYDAY LIVES EASIER AND ENSURING THEY ARE NOT LOCKED OUT OF APPLICATIONS. Dianne Nixon, Head of IT, Programme Management, Cambridge University NHS Foundation Trust CASE STUDY IMPROVING SECURITY AND PATIENT CARE CAMBRIDGE UNIVERSITY HOSPITALS NHS FOUNDATION TRUST 13 CHALLENGE Cambridge University Hospitals NHS Foundation Trust undertakes world-class research and provides a high level of patient care and service delivery at Addenbrooke Hospital. The Trust has over 7,000 staff and Addenbrooke Hospital serves the needs of around 500,000 people in the local area. The Trust s access security policy required the use of strong passwords and this barrier to access was causing frustration amongst staff. The Trust faced a significant issue with data silos, interrupted clinical workflows and an overburdened IT helpdesk. There was a need to improve user satisfaction whilst meeting compliance requirements and protecting patient data. SOLUTION Imprivata introduced an authentication and management appliance which is designed to make single sign-on and strong authentication management easy. Instead of disparate passwords, users have all their access rights linked to one single network credential. BENEFITS There was a substantial reduction in the volume of password reset requests and improved efficiency of the clinical staff. The number of steps needed to complete tasks when a user opens up patient data screens was reduced from 29 to nine, automating two-thirds of the process. This convenience provided the balance of access security and clinician satisfaction required for enhanced patient care delivery.

14 COMPLIANCE REPORTING AUTOMATED REPORTING TO SEE WHO IS ACCESSING CRITICAL INFORMATION WHY IT MATTERS Compliance reporting is vital for good governance. The healthcare environment is fast paced and involves a number of staff, with different job focus. It is critical that caregivers work well together and within a good governance framework that provides the backbone for enhanced patient care by allowing for quality improvement, reducing costs, meeting performance targets and minimising systemic and operational risk. HOW WE HELP By cutting through the complexity of technology and simplifying IT driven processes, we are providing healthcare professionals with the tools to ensure compliance and mitigate risk. This includes centralised authorisation, login monitoring and auditing of all workstation and application access as well as simplified set up and password management to prevent credential sharing and users writing down passwords. WHAT OUR CUSTOMERS SAY... WORKING WITH IMPRIVATA TO IMPLEMENT SINGLE SIGN-ON AND STRONG AUTHENTICATION HAS ENABLED US TO ENSURE THAT ONLY AUTHORISED EMPLOYEES CAN ACCESS PATIENT INFORMATION AND APPLICATIONS WHILST ALSO MAKING SURE WE CAN IMPROVE THE EFFICIENCY OF OUR AUDITING FOR REGULATORY BODIES. Paul Kirkpatrick, Director of IT, St Andrew s Healthcare, UK s largest not-for-profit mental health charity

15 SECURE REMOTE ACCESS BECAUSE HEALTHCARE IS NOW 24/7 WHY IT MATTERS Healthcare environments are unique, complex and evolving and healthcare professionals are working in an increasingly mobile way. This means that workplace tools available to them also need to be flexible so that they can continue to focus on delivering the very best in patient care, where ever they are. HOW WE HELP Secure remote access gives healthcare professionals timely and convenient access to patient information anywhere, on any device - personal computer, office computer or ipad. Strong authentication and application single sign-on ensure care providers can securely access protected health information from a variety of devices including their personal devices if required. By removing the barriers to technology, healthcare professionals can focus on what they do best patient care. As additional security, second factor authentication can be added to ensure the validity of credentials supplied. For example, a clinician at a hospital with secure remote access is called at home about an urgent case that needs reviewing. The clinician logs on to the secure portal from their preferred device and enters their credentials. The organisation has opted for telephone based second factor authentication from an Imprivata partner. Therefore, an automated telephone call is placed to the clinicians mobile phone, which verifies the individual trying to access the system. The clinician confirms the request and is immediately logged in to their personalised remote portal.

16 CONCLUSIONS HEALTHCARE ENVIRONMENTS ARE COMPLEX AND FAST-PACED. THEY REQUIRE SOLUTIONS THAT WORK WITH CARE PROVIDERS - WHATEVER THE WORKFLOW, APPLICATION OR DESKTOP TO SAVE TIME. THIS TIME SAVING TRANSLATES TO REAL BENEFIT FOR THE REAL BENEFICIARY OF AN EFFECTIVE HEALTHCARE ENVIRONMENT THE PATIENT. IMPRIVATA PRODUCTS AND SERVICES SAVE TIME, REMOVE BARRIERS AND LEAD TO BETTER CARE FOR PATIENTS. IMPRIVATA DOES THIS BETTER THAN ANYONE ELSE.

FOR FURTHER INFORMATION ON IMPRIVATA S PRODUCTS AND SOLUTIONS, TAKE A LOOK AT WWW.IMPRIVATA.CO.UK

IMPRIVATA EUROPEAN HEADQUARTERS 6-9 The Square Stockley Park Uxbridge England UB11 1FW T: +44 (0)208 744 6500 F: +44 (0)208 744 6501 www.imprivata.co.uk Enabling Healthcare. Securely