Reference no: EM133661050
Case Study #1 BYOD
The Facility: Laker Ridge Rehabilitation Center* provides skilled nursing short-term rehabilitation services for adults of all ages. Laker Ridge Rehab Center bridges the gap between hospital and home, providing rehabilitation services to promote recovery from surgery, illness, or injury.
The personnel at Laker Ridge Rehabilitation Center includes administrative staff, nursing staff, therapists, and support services (dietary, laundry, housekeeping, maintenance, etc.). There is a medical director and two other physicians on staff, but they come in to make rounds once a day and leave to go to their other practice sites.
The EHR: Laker Ridge recently adopted Cygnet Electronic Health Record* Unbeknownst to the personnel and physicians, this EHR also has an EHR app called CygnetOne*. CygnetOne mobile app allows access to patient records, documenting in records, creating and signing orders, and group video conferencing. There is email and notification capability within Cygnet EHR, but no instant messaging capability.
Your position: You are the Director of Information Technology at Laker Ridge Rehabilitation Center. You know about the EHR app CygnetOne, but its implementation has not been scheduled as it is not high on the IT priority list. You also know that there are instant messaging programs that could be added to work computers, but no one has requested this.
The Scenario: Tom Johnson is the brother of Ryan Johnson who is currently a patient at Laker Ridge Rehab Center. Tom was at a social event, talking with several friends, including Sam. Sam's wife, Jasmine, is a physical therapist at Laker Ridge Rehab Center where Tom's brother Ryan is.
While Tom and his friends were talking, a cell phone chimed that a message had come through. Sam picked up his wife's cell phone since Jasmine was across the room. Sam called out to her and read her the text message. The message said, "the physician agreed that a drug screen was a good idea for Ryan Johnson." The people at the party who overheard the text message were immediately aware that Ryan Johnson was Tom's brother, and Ryan was going to have a drug screen.
Tom did not want to get Jasmine in trouble but was very upset that personal information about his brother's medical condition was released in front of others.
The licensing board opened an investigation and learned that the attending physician customarily texted orders to the personal phone numbers of nurses and therapists at the rehabilitation facility. This saved time as the nurses and therapists got the orders directly and they didn't have to go through the usual process of calling the physician, waiting on a call back, or for the physician to return to the rehab center to enter orders into the electronic health record.
The practice was widely known within the rehab facility but was not the approved method of communicating orders.
* Both Laker Ridge Rehabilitation Center, Cygnet Electronic Health Record and Cygnet One are fictitious
Case Study Questions:
What workaround is identified in this scenario? Define workaround and identify at least one pro and one con to workarounds related to EHR usage.
What principles of electronic security were violated in this scenario?
Search for examples of BYOD (bring your own device) and identify the elements/actions/requirements that should be included in a BYOD Policy and Procedure for Laker Ridge Rehabilitation Center. Strong Recommendation: Review the Policy in the case study module about verbal orders. This may give you a frame of reference for requesting, transmitting, or receiving orders through texting with a personal device at work.
What alternative to BYOD could be substituted?
Write a policy and procedure for either BYOD or an alternative process for BYOD. Attach the Policy/Procedure to the paper as an Addendum.
Based upon your leadership and/or management skills, relate how you plan to implement the new policy. (For this section, you may write in 1st person)