IT for healthcare: the practice has to be able to open.
Patient data secured, and a surgery that carries on when the internet line is down.
Short answer
IT for healthcare has to meet two demands: patient data is special-category personal data and must be demonstrably secured, and the practice must be able to keep working during an outage. Jevana manages the workstations, network and backups of GPs, physiotherapists, dentists and other small care organisations. The patient record stays with the supplier of the information system; we arrange everything needed to reach it.
What NEN 7510 asks of a practice
NEN 7510 is the Dutch standard for information security in healthcare. For a small practice it comes down to a handful of concrete things: everyone signs in with their own account, screens lock, devices are encrypted and up to date, and it is on record who may access what.
We are not a certifying body and do not issue a certificate. What we do is set up the technology so the measures from the standard are in place, and write down how, so you can show it when someone asks.
What we arrange in a practice
At the front desk and in the consulting room
- A personal account per employee, locums too
- Screen locking that cannot be switched off
- Printers and card readers that still work after an update
The network
- Waiting-room wifi kept apart from the practice network
- A 4G line that takes over when the fixed connection drops
- A firewall that someone maintains
Outside the record
- Backup of mail, protocols and rotas
- Secure email with patients and referrers
- Laptops for home visits, encrypted and able to be wiped from a distance
When a practice calls us
- The internet line fails on a Monday morning and nobody can reach the record
- An audit shows three assistants share the same password
- The practice moves or gains a second location
Questions
What requirements apply to IT in a healthcare practice?
A healthcare practice is bound by the GDPR, with its extra protection for health data, and by NEN 7510, the standard for information security in healthcare. In practice that means personal accounts, two-step verification where possible, encrypted devices, an up-to-date network, logging of access and data processing agreements with suppliers. We set up the technical side and put on record what is in place.
Do you also manage our GP or patient system?
No. The information system with the patient records is managed by its supplier, who also looks after the backup of the records. We take care of the workstations it runs on, the connection to it, the card readers and printers, and everything outside the system. In an outage we find out which side it sits on.
What happens if the internet goes down during surgery hours?
With a 4G backup the connection switches to the mobile network by itself. The record, the diary and the card payment stay reachable, usually without anyone noticing. Without such a fallback a practice with an online record comes to a standstill. For a practice we therefore recommend the second line as standard.
May a practice put patient data in Microsoft 365?
The record itself belongs in the information system. For mail, rotas and documents many practices use Microsoft 365, and that is fine provided it is locked down properly and there is a data processing agreement. If you would rather keep documents with health data on a server in the Netherlands with no American owner, JevanaHub is an alternative. Which suits depends on what you keep in it.
Goes well with
-
Internet backup over 4G
A second connection over the mobile network that takes over by itself when the fixed line fails.
-
IT management
Workstations, network, servers and licences looked after by two people, for a fixed monthly fee.
-
IT for education
Small schools and training providers: many devices, few administrators and data on minors.
-
Cybersecurity for SMEs
The measures that stop most attacks, in an order a small business can follow.
-
IT for law firms
Confidentiality built into the technology: IT management for law firms and legal service providers.
-
IT partner
One party for workplace, network, hosting and website, with two fixed faces.
Tell us what you run.
An introduction costs nothing. You talk straight away to one of the two people who will actually do the work.
or email info@jevana.systems