Session Objectives: Define Information Governance Demonstrate how - - PDF document

4/25/2016 1

NCHIMA 66th Annual Meeting

Integrating Information Governance into your Course Curriculum

Session Objectives:

• Define Information Governance
• Demonstrate how IG can enable Health IT Program

success

• Describe IG foundational concepts ‐ and show how

they can be incorporated as part of an IG curriculum: – Data Quality and Integrity – Enterprise‐wide Policy – Privacy and Security – Metrics

• Provide techniques /case study to help students

embrace the concepts of IG

THE IMPORTANCE OF INFORMATION GOVERNANCE

4/25/2016 2

Addressing the IG Program Implementation Gap

4 Source: AHIMA | Cohasset 2014 Benchmarking White Paper on Information Governance in Healthcare – underwritten in part by Iron Mountain.

The Importance of IG is Recognized

91% 2/3

Acknowledge the importance of the information drivers Of these recognize the need for IG

Program Implementation Gap

1/3

Have taken steps toward IG Programs

Source: Cohasset Associates/AHIMA 2014 Information Governance Benchmarking Survey partially underwritten by Iron Mountain

Information Governance Defined

5

An organization-wide framework for managing information throughout its lifecycle and for supporting an organization’s strategy, operations, regulatory, legal, risk, and environmental requirements.

2014 Information Governance in Healthcare Benchmarking Survey by Cohasset Associates and AHIMA and underwritten by Iron Mountain.

5 6

Aligning IG with Health System Strategy

4/25/2016 3 IG: STRATEGIC TO ACHIEVING STRATEGIC GOALS

• Types (Clinical, Financial, Analytics, Operations)
• Forms (Physical, Digital structured, Digital

unstructured, Metadata)

• Sources (Internally Generated, Externally

Generated)

Information Explosion

Volume, velocity, and variety of information

Population Health Management Clinical Decisions Community Health

Leverage Information for Advantage

Uses of Information Big Data = New Opportunities

4/25/2016 4

Minimize Breaches Enhance Data Quality Enable Defensible Disposition Protect Investments

Leverage IG to Reduce Cost and Risk

THE BUILDING BLOCKS OF INFORMATION GOVERNANCE

Current State: Maturity of IG Policies and Practices

12

Information Security policies and practices Privacy policies and practices

50% 44%

Retention Schedules and Practices

Practices to preserve information for legal holds

34% 30%

Practices to delete/ destroy

• utdated

information

26%

Source: Cohasset Associates/AHIMA 2014 Information Governance Benchmarking Survey partially underwritten by Iron Mountain

4/25/2016 5

Accurate Information = Quality Care

IG Building Blocks: Data Quality and Integrity

13

Information Integrity

• Accurate, reliable, up‐to‐date, fit‐for‐

use Data Cleanup

• Master Patient Index Quality

IG Building Blocks: Enterprise‐Wide Policy

14

Regulations continue to increase

Understand retention rules for:

• Clinical Data
• Financial Data

Establish Policy Regularly update policy

IG Building Blocks: Privacy & Security

15

Breaches & Cyberattacks

PHI is pervasive

• Physical records, electronic records,

devices Cross‐Functional Support Needed:

• IT, Compliance, Legal, Data

4/25/2016 6 Metrics are missing

Have metrics to guide IG assessments & improvements

• nly

10%

IG Building Blocks: Metrics & Measures

• Identify, capture, & review metrics on an on‐going

basis

• Determine an IG assessment cycle
• Establish a formal process for review/maintenance

IG Building Blocks: Metrics & Measures

INVENTORY TRAINING RETENTION STAFFING DISPOSITION VENDOR MANAGEMENT PRIVACY & SECURITY LEGAL HOLDS GOVERNANCE Risk & Control Functions:

Quarterly Annually Continuously

• Identify new risks, add or

modify controls

• Confirm applicability of

current controls, edit as required

• Review input from LOBs re

ease of use, rating system, etc.

• Make appropriate changes to

process & communicate to LOBs

• Monitor methodology
• Engage any new stakeholders
• Identify gaps in

Framework design & execution

• Receive input from

LOBs

• Recommend

changes, as required

• Assess how

controls are functioning

• Recommend

changes to

• versight team &

communicate to LOBs

18

Oversight at Regular Intervals

4/25/2016 7 Information Governance – Who is Involved

Health Information Management

SENIOR

LEADERSHIP

ADVOCATE

INFORMATION GOVERNANCE COUNCIL

Legal Compliance /Audit Security/Risk IT Clinical

Lifecycle governance needs

2 3 4 5

to know

what systems

are producing, storing and managing information

a policy

that is up to date and relevant to the business and geography to

attach that policy to information

to inform required lifecycle behavior to

execute lifecycle behaviors on

information with consistency to

understand behaviors

to ensure compliance and drive efficiency

1

20

CASE STUDY: INTEGRATING IG INTO CURRICULUM

4/25/2016 8

22

Integrating IG into Curriculum

23

• Dr. Nigel

Scafell PhD Michael McKinley Estella Townsend Sue Nordend Lucas Neblina

24

Learn:

Knowledge Checks

Know: Activities /Peer Engagem ent Do: Insight Led Conversat ions Certified

Learning Process

4/25/2016 9

Example

25

QUESTIONS?

Thank You

Jeff Ryan Iron Mountain Senior Advisor Professional Services jeffrey.ryan@ironmountain.com