You have a thriving healthcare practice. Enough patients to keep you and your staff busy with plenty of good work. All the hard work that you put in school, residency and getting your practice up and running is now paying off well. The present is fine and the future is looking good too. Those retirement years that you have always dreamed off are fast becoming a reality.
Routine Monday morning….. start work around 8 am, see patients till 4pm. Regular mix of cases-some usual, others a bit complicated, just enough to make the work interesting. Nothing you cannot handle. Except….. today is not just a regular Monday. You get an emergency call informing you of a fire in your office building. You rush to your office only to find that the building is inaccessible. The building will have to be inspected for damage before anyone is allowed inside. This could take a few days or more, depending on the damage. All your equipment, computers, servers and data on them is inaccessible and may even be damaged. You have no way of knowing which patients are scheduled for the next day and have no way to contact them. You are sure when all the practice data was backed up, if at all. Panic sets in. How long is it going to take for your practice to be up and running? How much is the business downtime going to cost you- loss of patients, loss of revenue and reputation, loss of confidential patient data, possible HIPAA violations and fines etc. Suddenly all that you have worked for might be lost.
Now imagine the same scenario 1, but with a twist.
As soon as you find out that your location is accessible, you activate your Contingency plan. You know your staff is trained and well versed in implementing the Contingency Plan, having reviewed and tested it every year. You call the key staff personnel to set the plan in motion. You call your backup and disaster recover solutions provider, knowing that they have your data securely backed up with full image of the server. You are confident that within the specified Recovery Time Objective ( RTO) and Recovery Point Objective( RPO) as stated in your service level agreement, your staff will be able to access the virtual server in the cloud that is an exact image of your physical server. All practice data is readily available to use. Now your staff can contact all the patients, reschedule appointments and assure them all their patient records are safe and secure. Additionally, you also know that you have a temporary second location in a different medical building that can be used as an alternate office for seeing patients, till you can get the primary location up and running again.
You have not only minimized your business downtime and prevented huge potential losses, but have also improved your reputation among your patients as someone who makes every effort to protect patient data and takes the quality of patient care very seriously.
So which scenario do you prefer?