Skip to main content
Greenway Health
Main navigation
  • Solutions
      • Greenway Solutions
          • Solutions by Product
          • NEW! Medical Coding
          • Cloud Bundle
          • Electronic Health Records
          • Practice Management
          • Revenue Cycle Management
          • Telehealth
          • Patient Engagement
          • Analytics
          • Interoperability
          • Clearinghouse Services
          • Care Coordination Services
          • Marketplace Partner Integrations
          • View All
      • Solutions
          • Solutions by Specialty
              • Cardiology
              • FQHC
              • OB-GYN
              • Orthopedics
              • Pediatrics
              • Primary Care
              • Surgery
              • Tribal Health
              • View All
      Past Webinar

      Breaking down the 21st Century Cures Act — what it means for your practice

      Read More
      Greenway Blog

      2023 Regulatory Updates: A Look Ahead

      View Details
  • Knowledge Center
      • Challenges
          • Data Security
          • Compliance and Reporting
          • Patient Care
          • Workflow Efficiencies
          • Profitability
          • Support and Training
          • MACRA: MIPS and APMs
          • Value-Based Care
          • View All
      • Knowledge Center
          • Resources by Type
              • Greenway Blog
              • Webinars
              • E-books
              • Case Studies
              • Infographics
              • Videos
              • View All
          • Resources by Topic
              • 21st Century Cures Act
              • Cybersecurity
              • EHR/EMR
              • Telehealth
              • Patient Engagement
              • Population Health
              • Regulatory
              • Revenue Cycle Management
              • View All
      Past Webinar

      Breaking down the 21st Century Cures Act — what it means for your practice

      Read More
      Greenway Blog

      2023 Regulatory Updates: A Look Ahead

      View Details
  • About Us
      • About
          • News
          • Events
          • Awards and Certifications
          • Award-Winning Clients
          • Greenway Champions
          • Greenway Engagement Model
          • Community Involvement
          • Careers
  • Cures Act Resources
Utility
  • Login
  • Support
  • Events
  • Careers
  • Contact
  • 877-932-6301

Free Consultation

greenway blog

Disaster planning for healthcare — 4 core CMS elements and more

cms emergency preparedness
Thumbnail

Disasters can happen suddenly and have a wide range of impact, from a few fallen branches in the parking lot to the total devastation of a practice. In emergency situations, having a healthcare disaster preparedness plan in place can make the difference.

For Adaugeo Healthcare Solutions, it began when an internet service provider crew running cable in the area severed a main fiber-optic line. During the 72 hours it took to restore communications, the practice had to cancel almost all of its appointments. While Adaugeo relied on its existing preparedness plan, the experience revealed the need for a secondary system and, ultimately, a move to the cloud.

“Any company — whether it has 10 people or 10,000 people — needs to have some sort of disaster recovery plan.”
Guy Jones, IT Support Specialist, Adaugeo

“Any company — whether it has 10 people or 10,000 people — needs to have some sort of disaster recovery plan,” said Guy Jones, IT Support Specialist for Adaugeo. “And you need to adapt to changing situations."

4 elements of emergency disaster management

Four elements of emergency disaster management

Creating a preparedness plan can help minimize risk related to a disaster. Such a plan can encourage safety for employees and patients, safeguard protected health information (PHI), and help chart a path to recovery.  

The Centers for Medicare & Medicaid Services (CMS) Emergency Preparedness Rule, which took effect in 2016, offers insight on emergency preparedness for healthcare providers. By identifying requirements, the rule encourages planning for natural and man-made disasters alike.

CMS classifies emergency preparedness guidance into four core elements.

  1. Risk assessment and emergency planning 

Determine which hazards are most likely in your local area. Consider the likelihood of interruption to communications, including cyberattacks. Does your healthcare disaster preparedness plan address the potential loss of communication, facilities, or supplies? CMS recommends you review and update your plan at least once a year.

  1. Communication plan

Establish a system to connect with staff, providers, and other key contacts. You should coordinate within your practice, as well as with state and local public health departments and emergency management agencies.  

  1. Policies and procedures

In general, policies are a set of overarching guidelines to organize your plan, while the procedures outline your approach step by step. As with your communication plan, your policies and procedures should comply with federal and state laws.

  1. Training and testing

Your practice should create a training program for employees and be prepared to update it at least once a year. In addition, you can reach out to groups and agencies in the community and tap into their disaster planning resources. You can also coordinate educational efforts with local organizations.

Through dedicated pages, CMS offers emergency preparedness guidance for earthquakes, wildfires, hurricanes, flooding, other severe weather conditions, and more.

Cybercrime: How healthcare providers can prepare

While natural disasters and accidents always pose a threat, cyberattacks are an increasing likelihood for practices. For many years, the threat of cybercrime has been growing in the healthcare industry. In 2020, healthcare topped all industries for average data breach costs — for the tenth year in a row.

Healthcare’s average breach cost in 2020 climbed to $7.13M, up 10.5% from the previous year, according to IBM. Meanwhile, the energy industry and financial industry ranked second and third, with average breach costs of $6.39M and $5.85M respectively.

The COVID-19 pandemic only strained the system further. As businesses went remote, cyber criminals took advantage. For Guy, a key aspect of cybersecurity is training system users.

A computer virus outbreak, Guy said, can often be attributed to a user “doing something that wasn’t planned, was outside protocol, or not paying attention.” The more people use a system, the greater the possibility of security holes.

For this reason, cybersecurity training is essential to your practice’s healthcare disaster preparedness. Read on for five steps you can take to protect patient data in the era of COVID-19.

Enlisting outside resources

Many practices have found support in preparedness and contingency planning from outside vendors. You will want to find out how the vendor will protect your practice and how, in the event of a breach, it would respond.

“Cyberattacks will continue, but security consultants and trusted vendors can help evaluate your practice’s security risk and provide recommendations for improving your company’s defense."
Brian Bobo, Chief Information Security Officer, Greenway Health

“Cyberattacks will continue, but security consultants and trusted vendors can help evaluate your practice’s security risk and provide recommendations for improving your company’s defense,” said Brian Bobo, Greenway’s Chief Information Security Officer.

Read on for additional comments from Brian, nine cybersecurity questions you should ask a prospective vendor, and an overview of cloud solutions such as Greenway Secure Cloud.

When lightning strikes

Disaster planning in healthcare is vital, but how do you build an emergency preparedness plan based on the unknown? Between floods, fires, hurricanes, and hacking, it can be hard to know where to begin to prepare. One simple first step is reflection.

Greenway’s quick readiness assessment can shed light on where you stand. 

“There will be times when something totally wild will happen, like a clinic getting hit by lightning,” Guy said. “Having a plan helps us understand what we will do in those situations.”

Healthcare disaster preparedness

How prepared is your practice is to handle unexpected situations?

Take the FREE assessment

Related Solutions

Greenway Telehealth™

Provide remote care and increase patient engagement.

Learn More

Patient Engagement

Engage with patients beyond the office, without adding extra work.

Learn More

Revenue Cycle Management

Streamline operational and financial processes for peak performance.

Learn More

Additional Resources

Thumbnail
E-book

Best practices for securing patient data and steps you can take today

Read More
Thumbnail
Greenway Blog

Cyberattacks: Top 4 healthcare security trends

Read More
Thumbnail
Greenway Blog

Pipeline hack drives home importance of cybersecurity planning in healthcare

Read More
Thumbnail
Greenway Blog

Avoid a hack attack! How to prevent security breaches in healthcare

Read More
Visit our Knowledge Center

Social

  • Facebook
  • Twitter
  • Linkedin
  • Instagram
  • YouTube
Footer menu
  • Term of Use
  • Privacy Statement
  • Compliance
  • Careers
© 2023 All rights reserved. Greenway Health, LLC

Stay informed with Greenway Health’s latest news

Subscribe