Foreword by the Business Continuity Institute (BCI)
John Sharp, FIMgt, MCIM
The Business Continuity Institute (BCI) welcomes the publication of this book by James Barnes which provides valuable guidance for those working in the Health Care sector, enabling them to establish a comprehensive Business Continuity process.In today's environment regulators have raised the game and now require evidence that critical processes and systems can operate in the most extreme of circumstances. The HIPAA regulations are but one example of how regulators are changing their demands of organizations across the globe.In this book James Barnes offers excellent advice for those who have been given the role of continuity manager within the health care environment. The author makes a key point which I fully endorse: it is not just about protecting/recovering the computer systems but also other support systems, people, facilities and supplies that ensure the smooth operation of the organization.Business Continuity is changing - planning for recovery from a major disaster is still essential but it has broadened to maintaining availability, preventing incidents from developing into crisis in the first place. Good planning and more essentially good rehearsals and tests ensure any organization is better prepared. By reading Business Continuity and HIPAA the Business Continuity Manager will also be better prepared.John Sharp, FIMgt, MCIM,Chief Executive Officer The Business Continuity InstituteJune, 2004Health care is rapidly turning into one of the most critical resources in modern society. As a branch of industry, it must balance the need for socially motivated service thinking with good business sense. It is nevertheless imperative that all health care institutions adhere to standards that are often higher than those found in other sectors of industry. Accordingly, HIPAA sets the scene for stringent regulation and supervision in hospitals and other healthcare-related organizations.Business continuity management in the health care industry creates many questions marks, particularly where HIPAA provisions are concerned. Jim Barnes's book provides pragmatic answers and delivers a long-overdue framework for introducing business continuity to the world of HIPAA ^ and vice versa. Thorough research, clear guidelines and a wealth of templates and samples have been combined to highlight what is needed, when and who should be responsible. For those who are less familiar with the health care sector, Jim's book will be a work of reference ^ for experienced practitioners, it will provide many an unexpected insight into the HIPAA mode of thinking.The survey results included cannot be ignored: the hard, empirical database of what happens in reality is clear evidence to support Jim's conclusions, and to reinforce the need for comprehensive business continuity management at all levels within health care organizations. If and where the Business Continuity Management framework suggested in this book is followed, the results will be practically useful and "HIPAA-tested."
BUSINESS CONTINUITY AND HIPAA: Business Continuity Management in the Health Care Environment is a "must read" for all practitioners in the health care fieldRolf von Roessing CISA, CISM, FBCI Member of the Board, Chairman of the Audit Committee, The Business Continuity Institute Vienna, Austria May, 2004