Business Continuity Plans (BCP), plans on how to provide a stable service, or recover after adverse actions, have become top of mind with many managers. Businesses have adopted such plans, or are in the process of implementing one, but owners may have missed some crucial elements that could result in an ineffective plan.

Here are six key non-IT functions and processes that need to be in place to ensure your company is ready to effectively execute your BCP.

Easy to use plans Many continuity plans have been developed mainly for the IT department, as such, they can be a little complicated to understand and follow if employees don’t have a technical background. You should aim to have a plan that’s easy to follow and can be understood by all employees.

Communicate plans Remember that your plan encompasses all facets of your organization. It’s crucial that every employee knows their role and the relevant actions to take when the plan is executed. To do this, you need to ensure that all employees have access to a copy of the plan and any changes or updates are clearly communicated.

Test plans Beyond communication, it’s important to conduct regular tests, with every quarter being sufficient. The tests should be as real as possible and span all departments within the organization. This will ensure that employees are aware of how they, and the systems, will react under duress. It’ll be beneficial to your business if the first time the employees execute the plan isn’t during an emergency.

Short term and long term plans Your BCP should consist of both long term and short term elements that can be easily adapted to meet changing business environments and the emergence of new threats. You should aim for an even mix of short and long term solutions that cover as wide a variety of situations as possible.

Ensure buy-in from all levels If you’re in the process of instituting a BCP you should ensure that the whole organization is onboard with the plan. If an employee is unsure about the validity of a part of the plan, take the time to find out why and ask for suggestions. An uninformed or uncooperative employee could be the difference between survival and failure in a disaster situation.

Update and Review After every test, staff turnover and technological update, you should review the plans and make changes if necessary. Essentially, if anything in the company changes, review and update the plan. Remember: just because you have an effective plan this month, doesn’t mean it’ll be so in the future.

Continuity plans are only as strong as the weakest link. In an emergency, the last thing you want is an employee following the wrong process or be unsure of what they should be doing. If this happens, you could see an exponential growth in recovery time and costs. We’re ready to tell you more, so please contact us if you would like to talk continuity planning.

The smartphone has become one of our most beloved devices. Like a favorite pet, we take it everywhere with us, show it off every chance we get and even use it as a way to conform or stand out. No matter which brand you have, you probably have important information stored on your phone, and should be taking steps to ensure that it’s secure from prying eyes.

Whether you have an Android, iPhone or Windows Phone 7, here are two tips to keep your smartphone secure:

Lock your screen If you have data or information on your phone you would like to keep secure, the first thing you should do is lock your screen. Most smartphone users lock their phone with a 4 digit number combination, but it’s recommended you use a password for higher security.

• On Android. To establish a password on your device go to Settings and select Security. Press Screen lock. On Ice Cream Sandwich, you have six options for security, with the least secure at the top and most secure at the bottom. Many users select Pattern or Password. Enter the password twice and press Confirm.
• On iPhone. Select the Settings app followed by General. From there select Passcode Lock and turn it on. You’ll be asked to set your passcode and confirm it.
• On Windows Phone. To set a passcode go to the home screen of your device. Open Settings from your Application list and select Lock & Wallpaper. Press Password, enter your password and then press Done.

It’s recommended that you set a password that’s unique. Don’t use your birthday, address or phone number. At the same time, you have to make it easy to remember. If you’re having trouble coming up with a password, this video by Mozilla is a big help.

Enable remote wipe While passwords and other security codes will go a long way in preventing others from accessing your phone, it often isn’t enough. The next step in device security is to set up the ability to remotely wipe your device.

• On Android. At this time there is no native remote wipe option on your phone. You’ll have to download an app from the Play store. The apps work by using a push service - you “push” the commands to your phone from another source i.e., a website. When you install the app, you’ll have to register your phone and access it from a website.
• On iPhone. The iPhone has remote wipe capabilities which can be accessed through iCloud. On your device select Settings, iCloud and turn on Find my iPhone. If you lose your phone log into iCloud and select Find my iPhone. From there you’ll be able to remotely wipe your device.
• On Windows Phone. If you lose your phone you can remotely wipe it by going to the Windows Phone website, logging in and selecting My Phone. From there you’ll be able to wipe your phone.

Even if you don’t have confidential information on your phone, it’s a good idea to, at the very least, set a solid passcode on your phone. Adding the ability to remotely wipe your phone will ensure the information won’t be viewed by other people. If you’d like other ways to keep your mobile phone secure, please contact us.

There’s a big gap between what physicians thought they could do, and what they were eligible to do, to collect meaningful use incentives last year, according to a new study, which appears in the May issue of Health Affairs.

The study shows that 91 percent of physicians nationwide were eligible for federal electronic medical record (EMR) incentives in 2011. However, only 10 percent intended to apply for the program.

That number was on the low side of what the federal government had anticipated. The Center for Medicare & Medicaid Services had estimated that 10 percent to 36 percent of Medicare-eligible professionals and 15 percent to 47 percent of Medicaid-eligible professionals would demonstrate meaningful use in 2011.

According to the authors, among physicians intending to apply for meaningful use, about 21 percent were ready with the 10 core capabilities. Even in the state with the highest degree of readiness - Wisconsin - only 32 percent of physicians were ready with the 10 core capabilities.

The authors say the low level of readiness illustrates the challenges in meeting the federal schedule for financial incentives. Healthcare practices have support options, however. Your IT provider can help you if you need assistance preparing your meaningful use.

The key to patient-centered care - a concept that continues to evolve - is the relationship between physician and patient. Finding the balance between patient engagement and information technology, however, can be challenging.

IT has benefited healthcare practices in many ways. For example, it allows patients to service themselves when it comes to transactional exchanges, such as scheduling appointments and reviewing bills.

There are fears, however, that IT can also create distance between the practitioner and patient, reducing face-to-face contact. Here are three tips to ensure that doesn’t happen:

1. Accept that patient-centered IT initiatives help the physician. Small practices need to adopt the same features as their competitors, including large practices as well as low-cost primary care providers such as CVS and Walgreens.

2. Determine your needs. Patient-centered IT practices vary. Some practices use patient portals to optimize patient input. Others use email, text, video and mobile apps to create an impact across a broader spectrum of their patients' health. You’ll need to find what works best for your patient. Younger patients, for example, might prefer text messaging; older patients might prefer email.

3. Reconsider your reimbursement model. IT advancements have patients emailing, text messaging and video conferencing their doctors without payment. That puts pressure on the physician to do more for less. This is a problem with your business model, not your IT. You can't offer services that eradicate half of your service visits or you'll bankrupt your practice.

For details, please see “Five Keys to IT and the Physician-Patient Relationship.”

Social media is one of the most important communication tools of the modern era. Companies use it to connect with customers and like minded individuals, all in the name of building trust in their brand and products. While almost every company has a social media presence, they have been slow to trust employees to use personal social media at work. On average, 31% of companies block employees from accessing their accounts.

There are four distinct advantages to allowing social media:

• Increased productivity. There have been a number of studies that have found that judicious use of social media in the workplace will actually increase productivity. A study conducted by the University of Melbourne found that employees with access to social media are 9% more productive than those without.
• Increased buy-in. Employees like to feel trusted and empowered. If they don’t you can expect to experience higher turnover and lower morale. A good way to gain trust is to allow employees to use social media in the workplace. If an employee feels like they are trusted, they’ll be more likely to stay with the company.
• Recruiting. Small businesses have started to use social media for recruitment, but limit efforts to one account. If you have 10 employees in your organization, each with a social media account with 100 friends, you have the potential to reach 1,000 people. This is achievable if employees are allowed to access social media at work and are encouraged to share posts.
• Identification of business opportunities. Through the use of social media, employees in charge of sales and business development can source new clients and build fruitful relationships.

There are many advantages to allowing access to social networks at the office. If you‘re hesitant to completely open the social media floodgates, try doing so in short periods, like the final three hours of the working day.

No matter what you decide, allowing access to social media is a good practice for your business. If you would like to learn more about social media and how you can leverage it in your business, we are happy to talk with you.

Voice over Internet Protocol, VoIP, has become one of the main ways businesses communicate. An ever growing number of companies have been switching over to VoIP systems to take advantage of its cost savings. Recently, one of the most popular programs, Skype, reached a milestone of 40 million users logged in concurrently.

Skype has some excellent features but many businesses stick to the basics. Here are four ways you can better utilize Skype.

• Call forwarding. If you’re expecting an important call but have to step away from the computer for a bit you can forward any calls to your phone. To set up call forwarding: open preferences and select Calls. You will see the option to set up call forwarding at the top of the page. Press the Forward calls radio followed by Set up Forwarding. Be aware that regular call rates will be charged.
• Screen sharing. Skype is a terrific collaboration tool and many businesses take advantage of it by holding virtual meetings. You can take this one step further by sharing your screen with other parties you are chatting with. This is a fantastic way to give virtual presentations. To share your screen while in a chat press the plus symbol at the bottom of your screen, or right click, and select Share Screen.
• Customer service tool. Using Skype is a convenient way to get in contact with your customers. Ask your website developer to put a Skype button on your website. Be sure to add when you or your employees are available to be contacted.
• Add-ons. Skype has solid features but there are a multitude of add-on apps that can make it even better. Some apps allow for closer collaboration, let you broadcast pre-recorded messages, or record video and audio calls. The apps can be downloaded from the Skype Shop.

Skype has many useful features that when utilized allow businesses’ clients and employees to communicate with ease. If you would like to know more about using Skype or other VoIP services in your company please give us a call.

With the adaptation of Stage 2, companies operating in the electronic medical records will shift their focus from the capture to exchange of health information. One industry insider has recommended 10 things your EMR needs to be truly interoperable.

1. Single sign-on (SSO). Applications tend to proliferate, and if you don't allow people to switch between these applications using a common login and password, users will get frustrated and give up.
2. Context transitions. As applications grow, and you need to integrate them into an EMR, SSO won’t be enough, because you’ll still lose the “active patient or task" being performed. You’ll also need to provide for the transition of context between applications.
3. Widget publishing. EHRs often have hundreds of functions, and if some are exportable or publishable as widgets, they become much easier to integrate into new user interfaces in the future.
4. Widget consumption. EMRs will become more like containers of cross-application functionality than innate functionality, so consuming widgets will be a basic requirement.
5. Mash-ups. EMRs should allow access to their content through the content management interoperability services (CMIS) standard, thereby allowing users to unlock content they have in various health records.
6. Customizable dashboards. EMRs should provide dashboards that can be tailored by organization, user role, or even user.
7. Interactive Voice Response (IVR). IVR, which allows an EMR to interact with users through phones and other voice systems, such as Skype, will improve collaboration with patients and other physicians who aren’t at a computer.
8. Voice recognition. This will help users conduct EMR tasks more efficiently.
9. Natural language understanding. Because most EMR data is entered by humans, an EMR must integrate with systems that can convert the spoken word or typed text to structured data.
10. Customizable data import and export. A good EMR must allow customizable importing and exporting of simple lists in common formats, such as Excel, CSV and XML.

Details about these tips, and an additional two not discussed above, can be found here.

In order for your IT department to be successful, you need a strategic plan that will both optimize your workflow and help to define your practice’s needs. The well thought out and executed plan will exhibit a focus on the experiences of your staff and patients. Here are five considerations that can help you develop your strategic IT plan.

1. Improve the patient experience. Many healthcare practitioners consider the patient experience a major challenge, yet don’t give much thought to how IT can improve it. Consider what you can do electronically to support patients, whether they're in your facility or not. Electronic forms? Email and text message reminders and confirmations? Kiosks?
2. Consider best practices. Technology can help you get to know your patients better. The Web, for example, can be used as a first point of engagement. Ask a few questions of visitors, then tailor your responses to their needs. A patient interested in a first consultation would receive different information than one preparing for his or her first round of cancer treatment.
3. Don’t forget the staff! Your staff needs successful workflows to interact effectively with patients. Common errors are multiple devices and different logins. Keep in mind how clinicians work to develop efficiencies. Your staff needs to be able to provide clinical care without being tied to a PC.
4. Use social media. Social media often isn’t included in IT planning, as it’s usually more of a marketing consideration. Without thinking about how it will be used, it will become difficult for patients and staff to have a singular experience. Your IT department needs to work with other departments to develop a social media plan that will yield a consistent presentation to the end user.
5. Use integrative planning. Typically, IT does its strategic planning in isolation. Ideally though, IT would plan with other departments. This “integrative planning” allows for a consistent plan supported by all parts of the practice.

Communication is arguably the single most important aspect to a successful business. One of the most familiar forms of communication is the telephone, and with advances in technology, it’s unsurprisingly gone digital. The most commonly used digital voice system being Voice over Internet Protocol, or VoIP.

VoIP has become the main backbone of voice communication for a growing majority of companies, offering numerous benefits including potentially large cost savings, and decreased maintenance costs. When it was first introduced, the technology needed to run a VoIP system was expensive, limiting it to MNCs and other large organizations. However, over the past few years, the technology has come down in price and is now available for next to nothing, allowing SMEs to make the switch to VoIP. If your company is thinking of ringing the changes, there are some necessary requirements you should meet before you migrate.

Foundation A solid foundation for VoIP is key, as without a good foundation you’ll find that network speed and call quality are poor during heavy use. Most SMEs aim for a VoIP system that can handle around 10 employees on the phone at any given time. Before you start the integration, you should track your current call volume by keeping a note of the number of calls in and out, while paying close attention to call volume during peak hours and days.

You should also investigate the speed and stability of your current Internet connection. While a fast DSL or cable connection is good for browsing, it may not be robust enough to handle VoIP communications, which need a connection that is both quick and stable. Look at your downstream (traffic into your network) and upstream (traffic out of your network) connection speed during a time when the network is experiencing heavy data use. Anything over 1.5 Mbps in both directions should be enough to handle the majority of VoIP systems. Most Internet service providers offer a connection speed well above that, but it’s important to check it out first.

Framing When you have a solid foundation that will support your needs, the next step is building the frame for VoIP. You should determine exactly what’s required from your new system. Some good questions to ask include: Am I going to need to make international calls? How many VoIP connections am I going to need? Am I going to want to make video calls? What’s my budget?

Once you’ve determined your needs you can move on to picking equipment. If you’re a business that typically sticks to local, and some long distance calls, you shouldn’t require much in the way of equipment. The vast majority of companies use a device called a media gateway that allows normal phones to interface with an Internet connection - essentially turning a regular phone into a VoIP phone. If you’re a business that would like to take advantage of the more advanced features of VoIP, like portability, you’ll need more state-of-the-art equipment.

The final issue you need to address is security. On its own, VoIP is not the most secure of connections, as it’s open to all the same types of security breaches that computers and networks can fall prey to. To combat this, many good VoIP service providers will have security measures in place to protect VoIP calls on their network. On your end, it also helps to keep your Internet security up-to-date and conduct regular system scans.

Once you’ve addressed the internal requirements it’s time to start looking for a VoIP service provider. Take your time, shop around, ask competitors and other businesses what service they use. One question to ask a prospective provider is if they will be able to migrate your current number onto their system? While most can switch over your existing numbers, it can take a while, depending on your location and local legislation. So be sure to check if the provider can migrate your numbers and how long it will take.

From there, you should be ready to switch over to VoIP. If you’re still unsure of the process, there are consultants available who can help with the preparation, selection and integration. Good luck, and if you need more information about VoIP, we are here to help you.

With the increasing severity of natural disasters in recent years, many larger companies have started to develop and implement a continuity plan to ensure that they can still conduct business, no matter what happens. Businesses in the process of developing a plan will eventually need to decide if they want to use software or templates?

The decision between templates and software can be a tough one to make, as whichever one you choose, you’ll be using and relying on for a long time. To help you we’ve covered some pros and cons on both choices:

Using Software If you choose to go with a software program, you will be walked through the whole process allowing you to develop a useable plan. Another benefit of using software is that you’ll be able to develop reports if needs be.

The drawbacks of using software include cost, inflexibility and learning time. For the most part, business continuity planning software is not cheap, and at times can be inflexible due to limits within the program. If you have a niche need, the software may not cover it. In addition, as with mastering any program, the learning curve can be quite steep.

In general, using software would be advantageous for companies that have a bigger budget for the development of a continuity plan. Software is also a good bet if you don’t have staff who are experts in continuity planning, or if you operate in an industry where a continuity plan is necessary, e.g., companies working with healthcare insurance, or manufacturing companies that have introduced ISO 9000.

Using Templates If you feel that your company is not ready for software you can use templates to help you develop your plan. These solutions are mostly written plans that you adapt to meet your business needs. They’re useful if you’re just starting to do continuity planning, as they provide a normally solid foundation, and are generally a lot cheaper than software.

A limitation to using templates is that they can be a little too basic at times, and may not meet your needs. Granted, most plans will follow a basic structure and your developer will need to adapt some steps for your relevant region and industry.

As each industry is different, it’s hard to make a recommendation on what type of planning style companies should take. We recommend you take your time, do your due diligence and weigh out what’s best for your business. No matter which method you choose to go ahead with, ensure that it’s easy to implement, and that you’ll be able to teach your staff how to run the plan.

If you feel really lost or are not sure what to do, talking to professional consultants could go a long way in helping you develop a plan. If you’d like to learn more about business continuity planning please contact us - we are happy to help.