IBM Healthcare and Life Sciences IBM in Healthcare …A new MEDITECH Disaster Recovery Site and Services September 24th, 2009
IBM Healthcare and Life Sciences
IBM in Healthcare
…A new MEDITECH Disaster Recovery Site and Services
September 24th, 2009
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
22
Agenda
• The need for recovery
• MEDITECH Disaster Recovery (DR) Site and Services Offering
• Teknicor Services
• BridgeHead Software
• Initial Offering
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
3
Let’s start with getting terminology straight.
Business Continuity
ContinuousAvailability
DisasterRecovery
OperationalRecovery
HighAvailability
A characteristic of an IT service that masks from the users the effects of
losses of service, planned or unplanned.
Data, hardware and software is redundant on the
premises to accommodate many possible operational
situations.
The ability of an infrastructure to restart IT
operations, typically in another location, after a
disaster.
Fault-tolerant, failure-resistant infrastructure supporting continuous application processing.
Business Continuity is the ability of an organization to ensure continuity of
service and support for its customers, employees and business partners and
to maintain its viability before, after and during an event.
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
4
The Business Challenge
TheTheWideningWideningGapGap
Requires continuous information availability – BY DESIGN
Increasing cost of information unavailability
More business onlineMore applications & data
Ability to deliver through traditional recovery planning
More complex systemsLess window to recover
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
5
For greater effectiveness, IBM recommends any approach to business continuity addresses all categories of risk
Frequency ofoccurrences
per year
Freq
uent
Infre
quen
t
Consequences (single occurrence loss) $$Low High
Virus
Worms Disk failure
System availability failures
Pandemic
Natural disaster
Application outage
Data corruption
Network problem
Building fire
Terrorism/civil unrest
Data-driven risks
Event-drivenrisks
Business-driven risks
Failure to meet regulatory compliance
Workplace inaccessibility
Failure to meet industry standards
Regional power failures
Lack of governance
Source: IBM
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
6
So many things to plan for
A/C FailureAcid LeakAsbestosBomb ThreatBomb BlastBrown OutBurst PipeCable CutChemical SpillCO FireCoffee MachineCondensationConstructionCoolant LeakCooling Tower LeakCorrupted DataDiesel GeneratorEarthquakeElectrical ShortEpidemic
EvacuationExplosionFireFloodFraudFrozen PipesHackerHail StormHalon DischargeHuman ErrorHumidityHurricaneHVAC FailureH/W ErrorIce StormInsectsLightningLogic BombLost DataLow Voltage
Microwave FadeNetwork FailurePandemicPCB ContaminationPlane CrashPower Grid OutagePower OutagePower SpikePower SurgeProgrammer ErrorRaw SewageRelocation DelayRodentsRoof Cave InSabotageShotgun BlastShredded DataSick buildingSmoke DamageSnow Storm
Sprinkler DischargeSquirrelsStatic ElectricityStrike ActionSwimming Pool LeakS/W ErrorS/W RansomTerrorismTheftToilet OverflowTornadoTrain DerailmentTransformer FireUPS FailureVandalismVehicle CrashVirusWater (Various)Wind StormVolcano
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
77
Lost Surgical time
Emergency Department backed up
Patient Safety
Over worked Staff
Low Morale
Increased scrutiny by auditors, Ministry of Health, Community
Cost of Downtime in Healthcare could be as high as $18K per hour for a 300 bed Hospital
As high as $142,000 in over time to clear out backlog (Source: Lakeridge Health)
The consequences of down time
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
8
Notable Trends
Senior level executives seeking proof of recovery capabilities
Lack of confidence that current state reflects true recovery requirements and capabilities. Canadian regulators increasing their focus.
Continued focus on moving forward to further mitigate risks to recoverability:
• Integrated cross platform recovery – capabilities and testing.
• Full end-to-end application recovery.
• Alignment of recovery capabilities with business requirements & expectations.
• Formalized governance models to facilitate integration, consistency and reduction in “tower or silo” mentality.
• Adopting strategies for continuity of operations versus traditional failure/recover/resume strategy.
• Pandemic preparedness.
• Integrating BCP/DR/Crisis Management.
• Increased focus on Regulatory compliance.
• Management of BCP/DR documentation – consolidated centrally managed repositories.
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
99
Legislation and regulations
• CAN / CSA-Z1600 Emergency Management and Business Continuity
• Treasury Board Secretariat – Management Accountability Framework (MAF)
• Emergencies Act (Federal)
• Emergency Program Act (British Columbia)
• Emergency Measures act (Manitoba)
• Emergency Management Act (Ontario)
• Personal Information Protection and Electronic Documents Act (PIPEDA)
• Patriot Act
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
1010
Common Law
• If a reasonable person would foresee that the making of contingency plans for a computer system
interruption or failure is necessary to avoid harm to someone to whom a duty of care is owed, the
failure to put reasonable contingency plans in place, and to test their effectiveness, may
render the system proprietor liable.
• Professionals and managers with superior knowledge have a higher standard of care than that of a
“reasonable person” and are obliged to act reasonably in light of their knowledge.
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
1111
MEDITECH Disaster Recovery Site and Services
• Integrated Solution leveraging industry leading skills and capabilities:• Teknicor – Providing MEDITECH Skills and Services• Bridgehead & Legato – Software for automating Disaster/Recovery (MEDITECH Certified)• MEDITECH Certified technology provisioned in a secure IBM recovery centre environment• IBM Services for Business Continuity
IT recovery
Crisis management and response
DisasterRecovery Services
Work area recovery
IT recovery
Crisis management and response
DisasterRecovery Services
Work area recovery
Consultantsand tools
Data center facilities
Workplaces for critical business
Program management
Implementation
Design
Assessment and planning
Consulting Services
Program management
Implementation
Design
Assessment and planning
Consulting Services
Custom data protection management
Onsite data protection
Data retention and archival
Remote data protection
Information Protection Services Custom data protection management
Onsite data protection
Data retention and archival
Remote data protection
Information Protection Services
Managed availabilityManaged Services
Managed continuity
Managed availabilityManaged Services
Managed continuity
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
Teknicor Corporation
12
•Teknicor is a Canadian technology consulting firm based in Toronto specializing in the unique needs of healthcare technology and MEDITECH environments.
•Teknicor was founded out of the belief that the Canadian healthcare market while having access to many service vendors, still lacks the service partner that provides the highest possible blend of economic value, passion for customer experience and technological expertise.
•The founders of Teknicor have a combined 25 years of hands-on MEDITECH, Enterprise and Professional Service Experience and have served the industry on a multi-national scale.
•Teknicor and/or its people have implemented and performed work on MEDITECH environments in many dozens of hospitals across Canada and is the United States over the years.
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
1313
BridgeHead & Legato Software
• Integrated Serverless Backup (ISB) and Integrated Disaster Recovery (IDR) are the specific techniques recommended and certified by MEDITECH to provide data protection, business continuance and disaster recovery capabilities in SAN-based MAGIC OSAL and MAGIC Client/Server environments. ISB/IDR technology not only provides an effective way for hospitals to ensure data availability, but does so at a relatively low cost—with options to work within the common infrastructure constraints of most hospitals.
The benefits of ISB/IDR technology include:
• Significant downtime reduction
• Rapid access to recent and historic copies of MAGIC data
• Elimination of MAGIC performance degradation during storage management activity
• Highly automated and failure-resistant operations
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
14
Initial Offering
• MEDITECH MAGIC, MEDITECH Client/Server and MEDITECH 6.0
• Server restore from tape
• Tape Vaulting
• Disk to Disk
• Canada Wide Service
• Virtualization is available for all your infrastructure needs
• All non-MEDITECH Servers (Exchange, print, EDM, Back Office, etc.) and other OEM platforms can be included in your recovery solution configuration.
• Integrated support services; IBM / Teknicor, BridgeHead, Legato, Etc….
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
1515
Managed DR Services
Initial Set-up/On-boarding
• Site survey
• Documentation of server specifications and environment.
• Internal project plans
• Internal project management
• Server build with MEDITECH
• Develop customized server image
• Development of customized restore scripts and procedures
• Proof of service
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
1616
Managed DR Services
Managed Service Support• 24 x 7 declaration on-call support
• Populate customer specific MEDITECH server images.
• Restore data for servers to access.
• Assist with configure network connectivity.
• Provide on-site MEDITECH support at IBM recovery datacenter for duration of declaration.
• Functionality validation
• Decommissioning to steady state configuration.
Customized Services• Health Check Services.
• Compliance and Service Drills
• BridgeHead / Legato Software Deployment and Configuration
• Rebuild of Customer Environment
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
MEDITECH – Managed Recovery Services – Overall Diagram
IBM Dedicated MEDITECH infrastructure Environment
IBM Recovery Site
IBM BCRS Managed Services & Recovery
Management
BCRS – Recovery Managed Service –
MEDITECH SME
BCRS – Recovery Managed Service – BridgeHead SME
BCRS – Recovery Managed Service –
Network SME
BCRS – Recovery Managed Service – Tape Management
SME
BCRS – Recovery Managed Service – other Consultants
Dedicated BridgeHead
Server
SFTP Server
Customer Site
Ghost ServerSSPC ConsoleExternal Disks
`
Dedicated VLAN Infrastructure SFTP VLAN
IBM Hotsite Environment – Resource Pool
Intel Servers Pool (Dual Processors)BridgeHead
ServerIntel Servers Pool (Dual Processors)
Tape Library w/ Tape Drives
SAN Storage(DSxxxx)
StandaloneTape Drives
SAN Storage(DSxxxx)
Tape Library w/ Tape Drives
Printers
IBM BCRS Hotiste VLAN IBM BCRS Hotiste SANIBM BCRS Hotiste SAN
Firewall Routing
Intel-Domain Controller
Optional - BridgeHeadServer
MEDITECH Tape Recovery - Base
IBM Dedicated Meditech Environment IBM Hotsite Environment
IBM Dedicated/Hotsite Meditech Environment - At Time of Disaster or
Recovery Exercise WAN – Provided by IBM WAN – Provided by Customer
Property of IBM
IBM Steady State Environment -BridgeHead
WAN
Customer Site
Customer Site
WAN
IBM MEDITECH Offering – MEDITECH Tape Recovery Solution Conceptual Design
© 2009 IBM Corporation
IBM Healthcare and Life Sciences
18
Questions
Fate favours the prepared - Louis Pasteur