Managing technology risks in the healthcare sector: disaster recovery and business continuity planning

Abstract

The relentless onslaught of computers and communications technologies has recently descended on the healthcare industry. Fortunately, however, the utilization of technologies in healthcare delivery and administration could not be timelier because of the need to control escalating health costs. While the proliferation of information and communication technologies in healthcare, referred to as health management information systems (HMIS), is certainly long overdue in healthcare organizations (HCOs), it is important to recognize and be prepared for the vulnerabilities of these technologies to natural, technological, and man‐made disasters. This paper describes how HCOs have justifiably become dependent on HMIS and how these organizations may proactively plan for disasters which can impact on HMIS. A phased approach, referred to as the disaster recovery and business continuity (DRBC) planning model, is presented in the paper as an approach to develop and implement business continuity plans in HCOs.