Microsoft Word - CODAC Business Continuity Plan 2024.docx

 Faxes: CODAC fax server works with a direct in-dial number that goes to Fax Server. Fax Server receives the fax, makes it into a digital copy, and whomever is managing the queue, distributes it to the correct people who need to receive it. If the phone lines are down, so are the fax phones. Loss of Primary Computer System/Records/VPN or Internet loss CODAC utilizes computer systems for many business duties. In addition to medical records, computer systems are utilized for scheduling, emails, intranet, internet, and other vital business related matters. In the event of computer system interruption, personnel should contact the helpdesk at (520) 202-1700 or at helpdesk@codac.org. In addition, if the failure occurs after normal business hours, staff should contact the helpdesk after-hours number at (520) 260-8614 and the chief information officer, Rafael Arechaga, at (520) 591-2954. Network System and Disaster Recovery Plan CODAC’s utilizes up-to-date server technology to ensure failure resistant performance and safeguards. CODAC houses its servers off-site (Involta), therefore, any disruption at a particular CODAC site would not affect CODAC’s primary computer systems/records and these records could be accessed from any other site. Involta has its own Disaster Recovery Plan (DRP) to assist in dealing with any disruption on their end and has assured CODAC that any disruption in service could be re-instated within a matter of hours. Their plan includes back-up generators, etc. to ensure safety/security of servers and functions. In addition, to ensure rapid recovery should a problem arise, CODAC’s information systems Disaster Recovery Plan includes, but is not limited, to the following:  Appropriate system planning  Back up equipment (storage units/computers/etc.)  Servers are located at an off-site data center (Involta).  Ensure proper temperature and humidity levels in Server/Network room. State-of-the art data backup and recovery equipment, software, and processes.  CODAC has an off-site backup of EHR database in case the data center is no longer accessible.  Competent well-trained IT personnel.  Procurement of systems from nationally renowned hardware manufacturers that include full warrantees and service contracts.  Maintaining current software license and support contracts.  Accessible vendors contact information for fast expert support.  Disaster recovery kits which include the written plan, vendor licenses information, vendor contact information, software keys, administrator passwords, etc.  Utilization of ticketing software for documenting system issues and solutions.  Annual review and internal audit of the DRP to ensure information is current, accurate and effective.  Various policies to ensure overall system security and integrity.

Page 12 of 21