GE Healthcare Hardware Update and Best Practices … · GE Healthcare Hardware Update and Best...

1 /Title or job number /

3/24/2010

GE Healthcare

Hardware Update and Best Practices for EMR/CPS

CHUG, Spring 2010

Brian MitchellGeneral Manager of Technology Sales

David Pease Technology Solutions Specialist

2 /Title or job number /

3/24/2010

Discussion TopicsBest Practices

People –

Virtual Resources

Education

Vitality

Process –

End to End Process Best Practice

Continuous Improvement

Products –

System Standardization and Virtualization

Backup and Disaster Recovery

Output Management

Problem Remediation and Security

3 /Title or job number /

3/24/2010

Disclaimer

This presentation does not constitute a representation or warranty or documentation regarding the product or service featured. All illustrations are provided as fictional examples only. Your product features and configuration may be different than those shown. Information contained herein is proprietary to GE. No part of this presentation may be reproduced for any purpose without written permission of GE.

Any descriptions of future functionality reflect current product direction, are for informational purposes only and do not constitute a commitment to provide specific functionality. Timing and availability remain at GE’s discretion and are subject to change and applicable regulatory clearance

GE, GE Monogram and Centricity are trademarks of General Electric Company.

©2009 General Electric Company – All rights reserved.

People

People

5 /Title or job number /

3/24/2010

Technology Sales Group (TSG)

Since 1995

Average experience of 18 years

Provide optimum solutions for customers

Resource extension for customers

Extensive partner network – Virtual Team

GE best practice

Work with HP, IBM, Fujitsu, VMware, Biscom, EMC

6 /Title or job number /

3/24/2010

Virtual Team Solutions

Hardware

Backup

Disaster Recovery

Terminal Services

Virtualization

High Availability

System Security

Output Management

Faxing System

7 /Title or job number /

3/24/2010

TSG Mission Statement

Technology Sales Group (TSG) provides customers enterprise-wide, expert technology and business advice, with best in class products and services at excellent prices. TSG helps customers improve performance, increase capacity, lower cost and minimize risk in their computing environments. TSG is committed to advancing customer business success though IT.

Process

9 /Title or job number /

3/24/2010

End to End Process – One Example

Budget Process

System Design and Consulting

After Ordering . . .

Pre-Implementation planning

Product is integrated and tested

Product is shipped to you

Product is installed and readied for the application installation with Technical Project Management

. . . All by TSG Virtual Team for a tighter, cleaner, higher quality end to end hardware implementation.

Standardization, Certification and

Virtualization

11 /Title or job number /

3/24/2010

Architectural Platform Standardization“Best Practice”

Simplification – footprint, reduced price

Standardization and Certification

Expanded Infrastructure Product and Support

Higher Quality and Faster Turnaround

More $$ for Best Practices

More Green

More User Capacity with 64 bit

– CPS 9.0 up to 1,000 users

- EMR 9.2 up to 3,000 users

12 /Title or job number /

3/24/2010

Remote Location 1

Remote Location 2

Remote Location 3

Thick Clients

Terminal Servers or Citrix

Faxing ApplicationExtension

Modules HL7 Data Exchange

SAN (optional)

Firewall VPN

Internet

From This . .C-EMR 9.0 / CPS 9.0

Database

13 /Title or job number /

3/24/2010

VMware vSphere

Insert Any OS

DB HL7Terminal

Server

App

ServerDTS

Storage (optional)

Fax server

Thick Clients

14 /Title or job number /

3/24/2010

To This . . . . Consolidation

15 /Title or job number /

3/24/2010

VMware vSphere High Availability

Backup, High Availability and

Disaster Recovery

17 /Title or job number /

3/24/2010

Networker Backup

NetWorker Advanced File Type Device

• Instant Seek (no rewinding or fast forward)

• Simultaneous Backup and Restore

Multiple parallel backups to multiple devices

Sharing Devices over SAN

Data Flow over SAN, LAN or WAN

Backups are scheduled in groups

Stage from Disk to Tape

Application Modules back up Oracle, SQL Server, Exchange on-line without interruption

Disk-backuptarget

Tape library

Heterogeneous clients

Backup server

Key applications

LAN

NAS Storage Node

SAN

18 /Title or job number /

3/24/2010

Acronis Backup

• Block, File, Full, Incremental and Differential Backup

• Microsoft Volume Shadow Copy Service (VSS) support

• Dual destination backup

• Local Disk, NAS and SAN, Optical, Tape and More

• Bare-metal restore, to Dissimilar Hardware, to Different Host or Destination

• Encryption

• Centralized management console

•Virtual Machine Support

19 /Title or job number /

3/24/2010

High Availability

Oracle Dataguard (part of Oracle Enterprise)

HACMP (IBM Unix)

Service Guard (HP Unix)

VMware HA - - - ->

20 /Title or job number /

3/24/2010

VMware vSphere High Availability

21 /Title or job number /

3/24/2010

Facts About Disasters and Data Loss

22 /Title or job number /

3/24/2010

Layers of Protection

23 /Title or job number /

3/24/2010

DR for EMR/CPS

24 /Title or job number /

3/24/2010

Customer Testimonial

Disaster Recovery and Business Continuity:

replication

clustering

enterprise-wide backup

“When Hurricane Wilma came in, ISS worked with us continuously to provide emergency recovery to a standby system so that we were ready to fail over on a very short notice. Now, with full daily replication from our Florida data center to a standby location in Tennessee using ISS's IDRU and IDRR products and Command Center, we are well prepared for a range of disasters. ISS also supports backup and storage of our production system, which has been performing virtually non-stop for over 2 years, and if it succumbs, we have a ready backup system we can failover to in about a day.”

Dennis Beskie

Vice President IT Operations

TeamHealth, Ft Lauderdale, Florida

25 /Title or job number /

3/24/2010

Legal DR Expertise

1. Compliance Review for HIPAA Security Regulations

2. Risk Assessment and Recommended Mitigations

3. Helping the customer develop an RFP, solicit bids from qualified vendors, and review them

4. Post-Implementation Table Top Testing

.Attorney At Law

p (410) 963-5269

tfaith75@gmail.com

http://www.faithatlaw.com

Tech Law Notes Blog: http://www.2wg.net/lawblog

Timothy S. Faith, Esq.

Remediation, Compliance and

Security

Remediation, Compliance and Security

27 /Title or job number /

3/24/2010

HIPAA, SOX, PCI Compliance Gaps: Where You May Be Vulnerable

Where TDI Monitors and Logs

Other Vendors

Single OS Systems

Applications

Operating System

Firmware or Bios

Emulated Privileged OS Console

BMC

Vendor BMC Interface

Compliance Gap

Compliance Gap

http://www.itnews.com.au/News/102606,hackers-hold-us-medical-data-hostag.aspx

AFEHCT security

checklist item

ConsoleWorks/VIRTUALfx

supportNotes

Monitoring of access

System imposed audit trails ���� yesConsoleWorks/VIRTUALfx logs all activity reported from applications, managed systems, and security controls.

Software controlled audit trails ���� yesConsoleWorks/VIRTUALfx provides an audit trail for all activity related to console/device management.

Transaction log audit trail ���� yesConsoleWorks/VIRTUALfx logs all activity reported from applications, managed systems, and security controls.

File level audit trail ���� yes By database configuration to report to ConsoleWorks/VIRTUALfx

Record level audit trail ���� yes By database configuration to report to ConsoleWorks/VIRTUALfx

Field level audit trail ���� yes By database configuration to report to ConsoleWorks/VIRTUALfx

Write or change data audit trail ���� yes All changes to ConsoleWorks/VIRTUALfx configuration are logged.

Read, display, print data audit trail ���� yesConsoleWorks/VIRTUALfx produces audit-quality logs for all user activity and system

events in tamper-proof logs. The reporting subsystem allows you to filter and report on critical events as required.

Automatic display of “last access” to the next user, to allow self-audit by all users

���� yes ConsoleWorks provides user audit trail in the log files which may be reviewed.

Periodic management reports of exceptions ���� yes ConsoleWorks/VIRTUALfx provides custom reporting functions on collected data.

Periodic management reports of all access ���� yes ConsoleWorks/VIRTUALfx provides custom reporting functions on collected data.

Internal periodic audit of audit trails Not Applicable to Software ConsoleWorks provides capability to produce audit reports on a scheduled basis

Policies and procedures in place for Access Monitoring, to detect misuse and violations

Not Applicable to Software

Policies and procedures strictly enforced (even

fines)Not Applicable to Software

External/independent audit of audit trails Not Applicable to Software ConsoleWorks provides ad-hoc reporting for independent audits

AFEHCT Security Checklist – Monitor Access

29 /Title or job number /

3/24/2010

Keith Vinciguerra

781.844.5437| keith.j.vinciguerra@ge.com

Northeast

Contact Us

David Pease

509.781.3107 (direct) | david.pease@ge.com

Central and West

Or Call Your GE Sales Executive

Mary Galle

802.859.4772 | mary.galle@ge.comAtlantic and Southeast

30 /Title or job number /

3/24/2010

Thank you for having us here!