meditech disaster recovery site and services planning

IBM Healthcare and Life Sciences

IBM in Healthcare

…A new MEDITECH Disaster Recovery Site and Services

September 24th, 2009

© 2009 IBM Corporation


22

Agenda

• The need for recovery

• MEDITECH Disaster Recovery (DR) Site and Services Offering

• Teknicor Services

• BridgeHead Software

• Initial Offering



3

Let’s start with getting terminology straight.

Business Continuity

ContinuousAvailability

DisasterRecovery

OperationalRecovery

HighAvailability

A characteristic of an IT service that masks from the users the effects of

losses of service, planned or unplanned.

Data, hardware and software is redundant on the

premises to accommodate many possible operational

situations.

The ability of an infrastructure to restart IT

operations, typically in another location, after a

disaster.

Fault-tolerant, failure-resistant infrastructure supporting continuous application processing.

Business Continuity is the ability of an organization to ensure continuity of

service and support for its customers, employees and business partners and

to maintain its viability before, after and during an event.



4

The Business Challenge

TheTheWideningWideningGapGap

Requires continuous information availability – BY DESIGN

Increasing cost of information unavailability

More business onlineMore applications & data

Ability to deliver through traditional recovery planning

More complex systemsLess window to recover



5

For greater effectiveness, IBM recommends any approach to business continuity addresses all categories of risk

Frequency ofoccurrences

per year

Freq

uent

Infre

quen

t

Consequences (single occurrence loss) $$Low High

Virus

Worms Disk failure

System availability failures

Pandemic

Natural disaster

Application outage

Data corruption

Network problem

Building fire

Terrorism/civil unrest

Data-driven risks

Event-drivenrisks

Business-driven risks

Failure to meet regulatory compliance

Workplace inaccessibility

Failure to meet industry standards

Regional power failures

Lack of governance

Source: IBM



6

So many things to plan for

A/C FailureAcid LeakAsbestosBomb ThreatBomb BlastBrown OutBurst PipeCable CutChemical SpillCO FireCoffee MachineCondensationConstructionCoolant LeakCooling Tower LeakCorrupted DataDiesel GeneratorEarthquakeElectrical ShortEpidemic

EvacuationExplosionFireFloodFraudFrozen PipesHackerHail StormHalon DischargeHuman ErrorHumidityHurricaneHVAC FailureH/W ErrorIce StormInsectsLightningLogic BombLost DataLow Voltage

Microwave FadeNetwork FailurePandemicPCB ContaminationPlane CrashPower Grid OutagePower OutagePower SpikePower SurgeProgrammer ErrorRaw SewageRelocation DelayRodentsRoof Cave InSabotageShotgun BlastShredded DataSick buildingSmoke DamageSnow Storm

Sprinkler DischargeSquirrelsStatic ElectricityStrike ActionSwimming Pool LeakS/W ErrorS/W RansomTerrorismTheftToilet OverflowTornadoTrain DerailmentTransformer FireUPS FailureVandalismVehicle CrashVirusWater (Various)Wind StormVolcano



77

Lost Surgical time

Emergency Department backed up

Patient Safety

Over worked Staff

Low Morale

Increased scrutiny by auditors, Ministry of Health, Community

Cost of Downtime in Healthcare could be as high as $18K per hour for a 300 bed Hospital

As high as $142,000 in over time to clear out backlog (Source: Lakeridge Health)

The consequences of down time



8

Notable Trends

Senior level executives seeking proof of recovery capabilities

Lack of confidence that current state reflects true recovery requirements and capabilities. Canadian regulators increasing their focus.

Continued focus on moving forward to further mitigate risks to recoverability:

• Integrated cross platform recovery – capabilities and testing.

• Full end-to-end application recovery.

• Alignment of recovery capabilities with business requirements & expectations.

• Formalized governance models to facilitate integration, consistency and reduction in “tower or silo” mentality.

• Adopting strategies for continuity of operations versus traditional failure/recover/resume strategy.

• Pandemic preparedness.

• Integrating BCP/DR/Crisis Management.

• Increased focus on Regulatory compliance.

• Management of BCP/DR documentation – consolidated centrally managed repositories.



99

Legislation and regulations

• CAN / CSA-Z1600 Emergency Management and Business Continuity

• Treasury Board Secretariat – Management Accountability Framework (MAF)

• Emergencies Act (Federal)

• Emergency Program Act (British Columbia)

• Emergency Measures act (Manitoba)

• Emergency Management Act (Ontario)

• Personal Information Protection and Electronic Documents Act (PIPEDA)

• Patriot Act



1010

Common Law

• If a reasonable person would foresee that the making of contingency plans for a computer system

interruption or failure is necessary to avoid harm to someone to whom a duty of care is owed, the

failure to put reasonable contingency plans in place, and to test their effectiveness, may

render the system proprietor liable.

• Professionals and managers with superior knowledge have a higher standard of care than that of a

“reasonable person” and are obliged to act reasonably in light of their knowledge.



1111

MEDITECH Disaster Recovery Site and Services

• Integrated Solution leveraging industry leading skills and capabilities:• Teknicor – Providing MEDITECH Skills and Services• Bridgehead & Legato – Software for automating Disaster/Recovery (MEDITECH Certified)• MEDITECH Certified technology provisioned in a secure IBM recovery centre environment• IBM Services for Business Continuity

IT recovery

Crisis management and response

DisasterRecovery Services

Work area recovery

IT recovery

Crisis management and response

DisasterRecovery Services

Work area recovery

Consultantsand tools

Data center facilities

Workplaces for critical business

Program management

Implementation

Design

Assessment and planning

Consulting Services

Program management

Implementation

Design

Assessment and planning

Consulting Services

Custom data protection management

Onsite data protection

Data retention and archival

Remote data protection

Information Protection Services Custom data protection management

Onsite data protection

Data retention and archival

Remote data protection

Information Protection Services

Managed availabilityManaged Services

Managed continuity

Managed availabilityManaged Services

Managed continuity



Teknicor Corporation

12

•Teknicor is a Canadian technology consulting firm based in Toronto specializing in the unique needs of healthcare technology and MEDITECH environments.

•Teknicor was founded out of the belief that the Canadian healthcare market while having access to many service vendors, still lacks the service partner that provides the highest possible blend of economic value, passion for customer experience and technological expertise.

•The founders of Teknicor have a combined 25 years of hands-on MEDITECH, Enterprise and Professional Service Experience and have served the industry on a multi-national scale.

•Teknicor and/or its people have implemented and performed work on MEDITECH environments in many dozens of hospitals across Canada and is the United States over the years.



1313

BridgeHead & Legato Software

• Integrated Serverless Backup (ISB) and Integrated Disaster Recovery (IDR) are the specific techniques recommended and certified by MEDITECH to provide data protection, business continuance and disaster recovery capabilities in SAN-based MAGIC OSAL and MAGIC Client/Server environments. ISB/IDR technology not only provides an effective way for hospitals to ensure data availability, but does so at a relatively low cost—with options to work within the common infrastructure constraints of most hospitals.

The benefits of ISB/IDR technology include:

• Significant downtime reduction

• Rapid access to recent and historic copies of MAGIC data

• Elimination of MAGIC performance degradation during storage management activity

• Highly automated and failure-resistant operations



14

Initial Offering

• MEDITECH MAGIC, MEDITECH Client/Server and MEDITECH 6.0

• Server restore from tape

• Tape Vaulting

• Disk to Disk

• Canada Wide Service

• Virtualization is available for all your infrastructure needs

• All non-MEDITECH Servers (Exchange, print, EDM, Back Office, etc.) and other OEM platforms can be included in your recovery solution configuration.

• Integrated support services; IBM / Teknicor, BridgeHead, Legato, Etc….



1515

Managed DR Services

Initial Set-up/On-boarding

• Site survey

• Documentation of server specifications and environment.

• Internal project plans

• Internal project management

• Server build with MEDITECH

• Develop customized server image

• Development of customized restore scripts and procedures

• Proof of service



1616

Managed DR Services

Managed Service Support• 24 x 7 declaration on-call support

• Populate customer specific MEDITECH server images.

• Restore data for servers to access.

• Assist with configure network connectivity.

• Provide on-site MEDITECH support at IBM recovery datacenter for duration of declaration.

• Functionality validation

• Decommissioning to steady state configuration.

Customized Services• Health Check Services.

• Compliance and Service Drills

• BridgeHead / Legato Software Deployment and Configuration

• Rebuild of Customer Environment



MEDITECH – Managed Recovery Services – Overall Diagram

IBM Dedicated MEDITECH infrastructure Environment

IBM Recovery Site

IBM BCRS Managed Services & Recovery

Management

BCRS – Recovery Managed Service –

MEDITECH SME

BCRS – Recovery Managed Service – BridgeHead SME

BCRS – Recovery Managed Service –

Network SME

BCRS – Recovery Managed Service – Tape Management

SME

BCRS – Recovery Managed Service – other Consultants

Dedicated BridgeHead

Server

SFTP Server

Customer Site

Ghost ServerSSPC ConsoleExternal Disks

`

Dedicated VLAN Infrastructure SFTP VLAN

IBM Hotsite Environment – Resource Pool

Intel Servers Pool (Dual Processors)BridgeHead

ServerIntel Servers Pool (Dual Processors)

Tape Library w/ Tape Drives

SAN Storage(DSxxxx)

StandaloneTape Drives

SAN Storage(DSxxxx)

Tape Library w/ Tape Drives

Printers

IBM BCRS Hotiste VLAN IBM BCRS Hotiste SANIBM BCRS Hotiste SAN

Firewall Routing

Intel-Domain Controller

Optional - BridgeHeadServer

MEDITECH Tape Recovery - Base

IBM Dedicated Meditech Environment IBM Hotsite Environment

IBM Dedicated/Hotsite Meditech Environment - At Time of Disaster or

Recovery Exercise WAN – Provided by IBM WAN – Provided by Customer

Property of IBM

IBM Steady State Environment -BridgeHead

WAN

Customer Site

Customer Site

WAN

IBM MEDITECH Offering – MEDITECH Tape Recovery Solution Conceptual Design



18

Questions

Fate favours the prepared - Louis Pasteur