Medical Software Quality: Ensuring Correctness in the Clinical Environment



Similar documents
Design and Implementation of a Hospital Quality Assurance Program (H-QAP)

US & CANADA: REGULATION AND GUIDELINES ON MEDICAL SOFTWARE AND APPS OR

Regulatory Considerations for Medical Device Software. Medical Device Software

Mobile Medical Application Development: FDA Regulation

Regulation of Mobile Medical Apps

Medical Device Software

Considerations for using the Web for Medical Device Applications

How To Know If A Mobile App Is A Medical Device

Product Derivation Process and Agile Approaches: Exploring the Integration Potential

Medical Device Software: Establishing FDA Authority and Mobile Medical Apps

CDRH Regulated Software Looking back, looking forward

The Shifting Sands of Medical Software Regulation

Final Document. Software as a Medical Device (SaMD): Key Definitions. Date: 9 December Despina Spanou, IMDRF Chair. IMDRF/SaMD WG/N10FINAL:2013

Developing a Mobile Medical App? How to determine if it is a medical device and get it cleared by the US FDA

CENTER FOR CONNECTED HEALTH POLICY

CDRH Regulated Software

MOBILE MEDICAL APPLICATIONS

Poten&al Impact of FDA Regula&on of EMRs. October 27, 2010

Use of Mobile Medical Applications in Clinical Research

Mobile Medical Applications: FDA s Final Guidance. M. Elizabeth Bierman Anthony T. Pavel Morgan, Lewis & Bockius, LLP

Risk based 12/1/2015. Digital Health Bakul Patel Associate Director for Digital Health Office of Center Director.

FDA Issues Final Guidance on Mobile Medical Apps

Breakout Sessions: FDA s Regulation of Mobile Health and Medical Applications

Continuity of Care Record (CCR) in Germany? PROREC activities on the way to EHR interoperability

Mobile Medical Apps. Purpose. Diane Romza Kutz Fredric E. Roth V. Regulation and Risks. Purpose of today s presentation

Health Informatics. Jean Johnson, PhD, RN, FAAN Dean and Professor George Washington University

Medical Product Software Development and FDA Regulations Software Development Practices and FDA Compliance

Regulated Mobile Applications

WHITEPAPER: SOFTWARE APPS AS MEDICAL DEVICES THE REGULATORY LANDSCAPE

Guide for Custom-Made Dental Device Manufacturers on Compliance with European Communities (Medical Devices) Regulations, 1994

Fra udvikling til kommercialisering af kliniske apps Apps som medicinsk udstyr? 29/ Brian Hedegaard, DELTA

LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL. for INFORMATION RESOURCES

Information Security Management System for Cloud Computing

The U.S. FDA s Regulation and Oversight of Mobile Medical Applications

End-to-end Secure Data Aggregation in Wireless Sensor Networks

Healthcare Cybersecurity Risk Management: Keys To an Effective Plan

White Paper. Data Security. journeyapps.com

Cloud Security. Peter Jopling IBM UK Ltd Software Group Hursley Labs. peterjopling IBM Corporation

A Usability Framework for Electronic Health Records in Nigerian Healthcare Sector

The Education Fellowship Finance Centralisation IT Security Strategy

(1) Cancer drug means a prescription drug that is used to treat cancer or the side effects of cancer.

Health Informatics. Jean Johnson, PhD, RN, FAAN Dean and Professor George Washington University

Release: 1. ICA60308 Advanced Diploma of Information Technology (E-Security)

Why SaaS (Software as a Service) and not COTS (Commercial Off The Shelf software)?

REFERENCE DOCUMENT. (DRAFT for Public Comments) Title: White Paper on Medical Device Software Regulation Software Qualification and Classification


Regulation and Risk Management of Combination Products

Safeguarding public health The Regulation of Software as a Medical Device

White paper: Comprehensive Review and Implementation of Risk Management Processes in Software Development

Abstract. Introduction

Networked Medical Devices: Essential Collaboration for Improved Safety

Information security controls. Briefing for clients on Experian information security controls

Patient Centered Healthcare Informatics

Health Informatics. Health Informatics. Key Message. Health Informatics 01/29/2014. Jean Johnson, PhD, RN, FAAN 1

Security Information & Policies

Access Control of Cloud Service Based on UCON

Advantages and Drawbacks of Developing Mobile Health Technologies in the Cloud

3. Are employees set as Administrator level on their workstations? a. Yes, if it is necessary for their work. b. Yes. c. No.

IT OUTSOURCING SECURITY

EXIN Cloud Computing Foundation

Health Information Technology (HIT) and the Medicaid/CHIP Health Information Exchange (HIE) Advisory Committee

Comprehensive Review and Implementation of Risk Management Processes in Software Development

EHRs and Information Availability: Are You At Risk?

TELE HEALTH CASE STUDY: TELE RADIOLOGY

Regulated Applications in the Cloud

BYOD. and Mobile Device Security. Shirley Erp, CISSP CISA November 28, 2012

2014 Annual Report on Inspections of Establishments

Medical Device Data Systems, Medical Image Storage Devices, and Medical Image Communications Devices

ASCO s CancerLinQ aims to rapidly improve the overall quality of cancer care, and is the only major cancer data initiative being developed and led by

HOST BASED INTERNAL INTRUSION DETECTION AND PREVENTION SYSTEM.

Encyclopedia of Information Assurance Suggested Titles: March 25, 2013 The following titles have not been contracted.

RAYSAFE S1 SECURITY WHITEPAPER VERSION B. RaySafe S1 SECURITY WHITEPAPER

How To Protect A Hampden County Hmis From Being Hacked

Transcription:

4/27/2015 Medical Software Quality Dr Ita Richardson Principal Investigator, Lero / ARCH Medical Software Quality: Ensuring Correctness in the Clinical Environment Ita Richardson, Louise Reid, Pádraig O Leary 1

Research Background Ensure correct management and maintenance of connected health systems Hospital Quality Assurance program (Reid et al., 2012) Evaluate the effectiveness by which the data is presented to health care professionals e.g. Presentation of data to health care practitioners (O Leary, Carroll, Richardson, 2014) Research Background Lack of interoperability hinders collaboration, usability and flexibility of connected health e.g. Establishing how to model care pathways so that we can develop connected health flows (O Leary, Noll, Richardson 2014) 2

Research Background European Union regulation Focus has been in Ireland Software implementation in Hospitals Medical Devices and Software Software within Medical Devices Up to 70% of budget on software related activities 3

4/27/2015 Medical Device Software Software in Medical Device production lines Medical Device software Software manipulating Clinical data (Health Information Systems) 4

Analysis Published Research Medical Inquiries, Academic Research, Standards and Regulations (Medical and Software) Use of Software & Technology practice Participant observation, Study of Documentation, Interviews, Focus Groups, Workshops EU Directives.software in its own right, when specifically intended by the manufacturer to be used for one or more of the medical purposes set out in the definition of a medical device, is a medical device. 5

EU Directives 'medical device' means any instrument, apparatus, appliance, software, material or other article,., intended by its manufacturer to be used for human beings for the purpose of diagnosis, prevention, monitoring, treatment or alleviation of disease,. injury or handicap, FDA regulation an instrument, apparatus, other similar or related article, including a component part, or accessory which is. intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment, or prevention of disease, in man or other animals. 6

FDA regulation Medical Device Data Systems (MDDS).. does not modify the data or modify the display of the data, and it does not by itself control the functions or parameters of any other medical device. MDDS are not intended to be used for active patient monitoring FDA regulation The quality and continued reliable performance of MDDS are essential for the safety and effectiveness of health care delivery. Inadequate quality and design, unreliable performance, or incorrect functioning of MDDS can have a critical impact on public health. 7

Hospital Information Systems Information systems used hospital wide Information systems used specifically by single departments Information systems are used personally by clinicians No integrated electronic patient record (EPR) Primary medical record is paper based Reid et al., 2012 / Reid, 2014 Results Healthcare needs to evolve with technology HOWEVER Clinicians do not understand: Quality Requirements in the Clinical Environment for use of technology Regulations regarding the development of software which includes excel and mobile phone apps Risk involved in manipulating data from a certified Medical Device 8

Manipulation of data from MDs App development and use 9

Use of Internet Use of Smartphones 10

4/27/2015 Security and Privacy Research Question How can we assure Medical Device and Software Quality in our Hospitals? 11

Hospital Information Systems Low understanding of IS quality by clinicians Requirements engineering processes are often not used during systems development Healthcare staff, not qualified in software engineering nor compliance, develop and implement systems Little emphasis is placed on data reporting even when data is available What steps can be taken? Awareness-raising through education and audits (H-QAP) Collaboration between software engineers and clinicians to enhance healthcare through technology Implementation of measures to improve system use 12

4/27/2015 Simple measures for improvement For systems in hospitals Virus software used regularly Network availability restricted Encrypt data on local machines / servers Encrypt data transferred (HTTPS) Automated timeout after inactivity Backup databases & files E-mail scanning system Shut down work machines out of hours 25/37 Hospital Policies Where regulation is required, only regulated Medical Devices (including software) should be used in the hospital 13

4/27/2015 References O'Leary,Padraig, Noel Carroll and Ita Richardson, The Practitioner's Perspective on Clinical Pathway Support Systems, IEEE International Conference on Healthcare Informatics (ICHI 2014), University of Verona, Italy, 15 17 September 2014, pp.194-201. O Leary, P., Noll, J. and Richardson, I., A Resource Flow Approach to Modelling Care Pathways, Third International Symposium on Foundations of Health Information Engineering and Systems, Macau. J. Gibbons and W. MacCaull (Eds.): FHIES 2013, LNCS 8315, pp. 41 58, 2014, Springer-Verlag Berlin Heidelberg. Reid, L., Lotter, M., Burton, J. & Richardson, I., (May-June 2012) Designing and Implementing a Hospital Quality Assurance Program, IEEE Software, 29(3), pp. 37-44, DOI:10.1109/MS.2012.46. Reid, L., Implementing a Hospital Quality Assurance Program, PhD Thesis, University of Limerick, 2014. Thank you Dr Ita Richardson ita.richardson@lero.ie 14