Edward Hospital & Health Services - RSA
Edward Hospital & Health Services - RSA
Edward Hospital & Health Services - RSA
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
ABOUT<br />
EDWARD HOSPITAL<br />
<strong>Edward</strong> <strong>Hospital</strong> &<br />
<strong>Health</strong> <strong>Services</strong> is a fullservice<br />
medical center<br />
serving several communities<br />
west of Chicago,<br />
including Naperville,<br />
Bolingbrook, Plainfield<br />
and Aurora, Illinois. The<br />
hospital offers comprehensive,<br />
inpatient and<br />
outpatient services for<br />
primary care, cardiac<br />
medicine, reproductive<br />
health, cancer care,<br />
emergency medicine and<br />
many other specialties.<br />
<strong>Edward</strong> <strong>Hospital</strong> & <strong>Health</strong> <strong>Services</strong><br />
<strong>RSA</strong> Security and Vector ESP enhance<br />
physician access to patient information.<br />
“Our network of independent physicians comprises one of <strong>Edward</strong> <strong>Hospital</strong>’s most valued<br />
resources. Secure remote access has enhanced the work experience for our doctors by allowing<br />
them to use their time more efficiently. In turn, this improves the timeliness and quality of<br />
patient care while protecting patient records, in compliance with HIPAA1 . We couldn’t ask for a<br />
better outcome.”<br />
Gary Mielak, Chief Information Officer, <strong>Edward</strong> <strong>Hospital</strong> & <strong>Health</strong> <strong>Services</strong><br />
Located in Naperville, Illinois—which Money magazine voted as one of “the best places to live”<br />
in the U.S.—<strong>Edward</strong> <strong>Hospital</strong> & <strong>Health</strong> <strong>Services</strong> has a long track record of providing superb medical<br />
care. The hospital owes much of its reputation for excellence to the high caliber of its 800-plus<br />
independent physicians. More than 95 percent are board certified, and many have trained at<br />
prestigious medical universities around the world.<br />
ENHANCING THE QUALITY OF WORK LIFE<br />
To attract and retain the most talented doctors, <strong>Edward</strong> <strong>Hospital</strong> strives to provide the best<br />
possible work environment while using innovation to continually enhance the quality of patient<br />
care. The hospital had both these goals in mind when it implemented a secure remote access<br />
solution based on <strong>RSA</strong> SecurID ® authentication and Citrix MetaFrame for Windows ® .<br />
“Our physicians face many demands on their time,” said Laura Bagus, Director of Technical<br />
<strong>Services</strong> & Help Desk for <strong>Edward</strong> <strong>Hospital</strong>. “We wanted to make it faster and easier for them to<br />
obtain patient information when they were at their practices, working from home or traveling.”<br />
In the past, physicians had to request lab results over the phone and then wait while a staff<br />
member accessed the hospital’s Meditech health information system and then printed and faxed<br />
the relevant records. “We knew that if we could give physicians direct access to this information,<br />
everyone involved could work more efficiently, and patients would benefit from more timely,<br />
responsive care,” said Bagus.<br />
FINDING THE OPTIMAL SOLUTION<br />
To tackle this problem, <strong>Edward</strong> <strong>Hospital</strong> turned to one of its long-time solution advisors, Vector<br />
ESP, a leader in providing Secure Connected Access to applications and information. After<br />
evaluating the hospital’s requirements, Vector ESP proposed a solution that consisted of Citrix<br />
Metaframe for Windows and <strong>RSA</strong> SecurID two-factor authentication.<br />
1 <strong>Health</strong> Insurance Portability and Accountability Act
“We felt this combination of technologies closely matched<br />
the hospital’s requirements,” said Scott Hargus, Senior<br />
Systems Consultant for Vector. “From prior experience we<br />
knew that a Citrix and <strong>RSA</strong> Security joint solution is easy to<br />
use, allowing individuals to access applications using any<br />
standard PC and Internet connection. In terms of ease of<br />
deployment and cost of ownership, it does not require any<br />
manual installation or maintenance of client-side software,<br />
as would have been required with the VPN-based solutions<br />
available at the time.”<br />
MEETING THE CHALLENGES OF HIPAA<br />
Equally important, the solution addressed the high level<br />
of security called for by the hospital’s own standards and by<br />
HIPAA compliance requirements relating to user authentication,<br />
authorization and data protection. As Laura Bagus<br />
noted, “<strong>RSA</strong> SecurID two-factor authentication is a strong<br />
deterrent to unauthorized users who attempt to access<br />
medical records. It also protects our users from theft of their<br />
online identities by making it very difficult for an impostor<br />
to impersonate a legitimate user.”<br />
<strong>RSA</strong> SecurID tokens help ensure user identities by requiring<br />
individuals to input two unique identifiers during login: a<br />
one-time-use authentication code that is displayed on the<br />
user’s token at the time of the login, plus the user’s<br />
confidential PIN. Because the code is randomly generated<br />
and changes every 60 seconds, it is virtually impossible to<br />
hack or guess.<br />
Furthermore, Citrix MetaFrame allowed the hospital to provide<br />
secure access to specific applications without the risk of<br />
opening the entire network to remote users. Additionally,<br />
it protected sensitive patient information by encrypting<br />
data as it crosses the public network.<br />
ABOUT VECTOR ESP<br />
Vector ESP is a leading<br />
technology solution advisor,<br />
focused on providing Secure<br />
Connected Access to<br />
mission-critical applications<br />
and information through<br />
integrated services, solutions,<br />
hardware and software.<br />
Vector ESP is an<br />
<strong>RSA</strong> Securworld channel<br />
partner.<br />
BUILDING USER ACCEPTANCE<br />
Starting with a 100-user pilot program, use of remote access<br />
increased steadily, and today more than 600 people use the<br />
<strong>RSA</strong> SecurID authentication solution. Among medical<br />
professionals, the most common uses include accessing<br />
e-mail, viewing patient records and lab results and ordering<br />
tests and medications. Medical transcribers, who often work<br />
from home, also make significant use of the system to<br />
promptly deliver medical transcripts.<br />
“We were very pleased with every aspect of this solution,”<br />
said Bagus. “It provided on-demand access to information<br />
on a 24/7 basis, saved time by cutting down on phone calls<br />
and faxes, and reduced clerical errors associated with the<br />
handling of hard-copy records.”<br />
MAKING A GOOD THING BETTER<br />
<strong>Edward</strong> has since broadened its remote access capabilities<br />
by implementing the Citrix Secured Gateway product, in<br />
conjunction with <strong>RSA</strong> SecurID tokens, to create My.<br />
<strong>Edward</strong>.Org. “This enhanced solution makes it possible for<br />
us to provide Internet application access to a wider group of<br />
corporate users, because the applications already exist on<br />
our Citrix Farm,” said Patrick Man, Network Engineer for<br />
<strong>Edward</strong> <strong>Hospital</strong> and <strong>Health</strong> <strong>Services</strong>. “Due to the elimination<br />
of new user passwords and the relative ease of setup,<br />
most users don’t have to come in for training. Things have<br />
gone very smoothly, and support calls are way down.”<br />
Looking ahead, Man noted, “One of the goals of this<br />
solution is to offer an alternative to corporate laptops.<br />
With the popularity of home PCs and broadband Internet<br />
connectivity, we foresee the trend of laptop users migrating<br />
to My.<strong>Edward</strong>.Org for its many benefits.”<br />
Authorized Reseller:<br />
<strong>RSA</strong>, <strong>RSA</strong> Security, the <strong>RSA</strong> logo, SecurID, SecurWorld and Confidence Inspired are registered<br />
trademarks or trademarks of <strong>RSA</strong> Security Inc. in the U.S. and/or other countries.<br />
All other trademarks mentioned herein are the property of their respective owners.<br />
©2004 <strong>RSA</strong> Security Inc. All rights reserved.<br />
EDHO CP 0504