Becker's Hospital Review

116 CIO / HEALTH IT 51% of healthcare organizations don't have written procedures to address cyberattack responses: 4 things to know By Julie Spitzer H ealthcare leaders may not be properly prepared to face a cyberattack. In fact, 51 percent said their organization does not have written oper- ating procedures about how to respond to a cyberattack, according to a recent KPMG poll. KPMG asked 154 healthcare and life sciences leaders about cybersecurity pre- paredness during a KPMG webcast titled "It's not a question of if you will ex- perience a breach, it's a question of when. Are you able to respond to today's cyber threats?" Here are four survey insights. 1. About 29 percent of respondents did not know how their organizations re- sponded after a cyberattack had been resolved, but 15 percent cited technol- ogy upgrades, 14 percent cited training improvements and 17 percent cited staffing or leadership changes. 2. Twenty-five percent of respondents said data compromises after a cyberat- tack were resolved within a day, while 15 percent said it took "a few days" and 16 percent said data issues persisted for more than a week. 3. Respondents said lack of training (29 percent) was the biggest weakness in cybersecurity defense, followed by dealing with third parties (20 percent). 4. According to respondents, loss of confidential information (41 percent) was the No. 1 source of damage from a breach, followed by reputation damage (27 percent). n 64% of providers say EHRs failed to deliver many critical value-based care tools: 10 survey insights By Julie Spitzer H ealthcare providers are ramping up for the transition to value-based care, but do they have the tools to match? More than half say "no", according to a Sage Growth Partners study. Sage fielded answers from 100 healthcare executives for its report titled "Getting to value-based care: Are EHRs up to the task?" It also conducted six qualitative interviews. Respondents were primarily CEOs (22 per- cent), CMOs (21 percent), CFOs (15 per- cent) and CIOs (15 percent). Here are 10 things to know. 1. Respondents do not feel their value-based care needs are being met, with 60 percent to 75 percent of providers indicating they are seeking third-party solutions outside their EHR for value-based care solutions. 2. The majority (62 percent) of respondents said value-based care makes up 0 percent to 10 percent of their organization's revenues. 3. Seventy percent of providers said they've had an EHR for at least three years, but about half said they also have third-party population health management solutions. 4. Less than 25 percent of providers feel their EHRs meet core KLAS criteria for val- ue-based care. 5. Forty-six percent of respondents said they were somewhat satisfied with their EHR's value-based care functions, while 8 percent said they were highly dissatisfied with their EHR's value-based care func- tions. 6. About 66 percent of respondents said EHRs have failed to deliver promised clini- cian or patient satisfaction (60 percent and 64 percent, respectively) lower costs (76 percent) or offer better population health management tools (64 percent). 7. But, about half believe EHRs deliver better clinical outcomes (52 percent), ease of use (51 percent) and strategic improve- ments (49 percent). 8. While 65 percent of respondents said they were somewhat or highly unlikely to replace their EHR within three years, 56 percent of respondents said they are some- what or highly likely to switch their popula- tion health management solutions. 9. Providers indicated the top value-based care programs are ACOs (72 percent), Bun- dled Payments for Care Improvement (30 percent), Comprehensive Car for Joint Re- placement (23 percent) and Comprehen- sive Care Plus (15 percent). 10. The top value-based care challenges re- spondents face are: • EHR interoperability (42 percent) • Social determinants of health (34 percent) • Patient engagement (32 percent) • Coordinating stakeholders (30 percent) • Data analytics to support risk-based con- tracts (27 percent) n

• Cover