Build a Minimum Viable Hospital
During a cyber attack, minimize disruptions to patient care by prioritizing a core set of critical applications.
Maintain patient care during cyberattacks
A ransomware attack will take a hospital down for 2-3 weeks on average. When you define the few core applications most critical to maintaining patient continuity of care, and create a plan to quickly recover them, you can turn disaster into a testament to preparedness. This is your Minimum Viable Hospital.
Have Confidence In Recovery
When disaster strikes, you have a prioritized and tested set of priorities.
Maintain Patient Care
Ensure critical operations remain functional during a crisis.
Improve Cyber RTOs
Decrease recovery time during cyberattacks to reduce patient and financial impacts.
Defining the Minimum Viable Hospital
Start with understanding the primary applications critical to your service lines, patients, and staff. What can they not operate without? Beyond your Electronic Health Record (EHR) and Health Information System (HIS), what applications are critical to prioritize during a cyber outage, like facilities, supply chain, or payroll? Explore these key areas.
Map out required resources
Identify minimum resources needed to keep the lights on, including personnel (key roles and responsibilities), technology (hardware, software, and cloud services), physical assets (facilities, equipment), and financial resources (emergency funds, credit lines).
Understand communication plans
Often, during a crisis, the typical ways of communicating go out the window. Ensure that you have clearly documented procedures in place to provide contingency methods of communications when traditional methods are down to reduce medical errors and so that sensitive PHI doesn’t make it to unsecured networks.
Ensure you can recover data quickly to a clean point
During a ransomware attack, how confident are you that you can both find your backups and know that those backups are not compromised? Can you differentiate between data you need to restore, and malware within the backup data you don’t want to recover? You need the ability to quickly recover critical applications to a clean point in time, in a clean environment.
Be prepared to scale and adapt
Ensure that your Minimum Viable Hospital takes into account growing business data, new technologies, and emerging business needs. With the right plan and recovery technology in place, you can reduce the impact of cyberattacks today while accounting for future growth.
Ready to get started?
Get a personalized demo of the Rubrik Zero Trust Data Security platform.
