- Business continuity management (BCM) and disaster recovery are two tools that work together to detect data breaches and ensure workflows remain uninterrupted.
According to the Business Continuity Institute, BCM is the “holistic management process that identifies potential threats to an organization and the impacts to business operations those threats, if realized, might cause, and which provides a framework for building organizational resilience with the capability of an effective response that safeguards the interests of its key stakeholders, reputation, brand and value-creating activities.”
Healthcare organizations that are digitizing their IT infrastructures are faced with implementing new solutions – including BCM or disaster recovery – to view their entire IT environment. This helps ensure data is protected in the event of an outage or data breach.
The Ponemon Institute and IBM recently released a study examining how BCM impacts the cost of data breaches and its effect on disaster recovery efforts across all industries, including healthcare.
The study indicated BCM solutions as a valuable tool for detecting data breaches and responding quickly to protect the network. Ninety-five percent of respondents said that BCM involvement in resolving data breaches was very significant or significant.
Ponemon and IBM also found that organizations using BCM solutions paired with disaster recovery solutions reduced the amount of time it took to discover a data breach. The average time it took organizations implementing both tools was reduced by 78 days, which saved organizations an average of $394,922 per year.
"Executing business continuity management strategies to respond to data breach incidents is increasingly a top business priority for companies worldwide," IBM Global Resiliency Services General Manager Laurence Guihard-Joly said in a statement.
"Automating and orchestrating these disaster recovery and business continuity plans will help to not just protect sensitive data, but also ultimately boost productivity, strengthen competitiveness in the marketplace, and deliver greater return on investment in the long term."
Cloud-based disaster recovery also plays a significant role in supporting BCM. The study found that organizations that implemented BCM solutions along with automated disaster recovery saw an average of 39 percent reduction in cost per day of a data breach.
The study emphasized the combination of BCM and disaster recovery as resiliency orchestration that use cloud-based automation and management tools. The automation relieves IT administrators from a lot of the responsibility of managing and monitoring the complex workflow.
Automation gives IT administrators much better visibility of their IT infrastructure environment. Using automated management tools gives IT administrations more time to conceptualize and develop new applications instead of monitoring and analyzing issues with current applications.
"Business continuity management continues to play an important role in determining the impact of data breaches that put organizations at risk worldwide," Ponemon Institute Founder Dr. Larry Ponemon said in a statement. "As companies create, develop, and execute their business resiliency strategies going forward, they must consider all possible options to mitigate the effects of a data breach and keep IT infrastructures secure and available for themselves and their clients."
Cloud-based disaster recovery supports BCM because it allows organizations to have access to their data while a data breach is occurring.
Cloud managed disaster recovery automates the recovery process so IT administrators can focus on the actual data breach because they are confident that their solution will being data back online.
Webair CTO Sagi Brody told HITInfrastructure.com in a previous interview that organizations need a recovery solution that allows them to hit a button on their interface to prevent further damage from a cyber-attack. Entities also need to bring applications back online seamlessly so clinicians and patients are never interrupted during an attack.
“Using a cloud managed service takes responsibility off of IT teams that are already stretched thin," said Brody. “Organizations get someone on the hook not only for copying data, but also to do things IT departments simply don’t have the time to do, such as testing data integrity monthly and testing that the disaster recovery actually works.”
“Organizations are presented with a report telling them that their backup and recovery solution work and can be trusted in an attack.”
Combining BCM tools with cloud-based disaster recovery gives healthcare organizations the visibility needed to detect a data breach early and the ability to transition into recovery mode quickly during a cyberattack.