AJLM2202 - CME/CMLE - Anatomy of a Cyberattack Part 1: Managing an Anatomic Pathology Laboratory During 25 Days of Downtime-Anatomy of a Cyberattack Part 1: Managing an Anatomic Pathology Laboratory During 25 Days of Downtime

Anatomy of a Cyberattack Part 1: Managing an Anatomic Pathology Laboratory During 25 Days of Downtime

Pdf Summary

The document discusses the impact of cyberattacks on healthcare institutions, focusing on an anatomic pathology laboratory that experienced a 25-day complete shutdown due to a cyberattack. The attack affected various systems, including the electronic health record (EHR) system, laboratory information system (LIS), and other operational systems. The laboratory had to develop manual processes, redeploy staff, and outsource some cases to maintain operations during the downtime. The lab processed a significant number of surgical and cytology specimens during the outage, with some cases being sent out for processing.<br /><br />Key points highlighted in the document include the increasing vulnerability of laboratories to cyberattacks due to reliance on electronic systems, the importance of developing comprehensive downtime procedures, and the need for effective communication methods with stakeholders during outages. The article emphasizes the need for labs to be prepared for such risks, establish communication channels with staff and clinicians, map out workflows for adjustments, and consider diverting specimens to reduce workload during crisis situations.<br /><br />Lessons learned from the experience include stopping the influx of cases, establishing communication channels, adjusting staffing levels, seeking support from hospital administration and IT departments, developing templates for downtime reporting, and setting up phone triage lines for inquiries. The document underscores the importance of proactive risk management, effective communication, and process improvement during crisis situations in healthcare facilities.

Keywords

cyberattacks

healthcare institutions

anatomic pathology laboratory

complete shutdown

electronic health record

laboratory information system

downtime procedures

communication methods

risk management

process improvement