Principales casos de uso en la salud

• Cumplir el mandato de 15 días de parcheo de la HIPAA
• Gestionar BYOD
• Inventariar dispositivos y generar informes
• Evitar el ransomware con la seguridad del navegador
• Reducir los costos de aprovisionamiento de dispositivos
• Distribuir clientes de EHR
• Ayuda remota en múltiples sitios

• • 15-day mandate from HIPAA

    The new proposal to HIPAA security rule mandates healthcare organizations to patch their systems within 15 days of identifying a critical vulnerability

    

  • Example patching playbook from one of our customers

    • N-1 patching for critical servers, customizable reboots, self-service portal for server admins to decide patching and reboot timelines
    • Create custom cohorts based on devices and departments, like radiology, and clinical informatics for creating test beds for patches.

    View full playbook

    

  • Forrester acknowledges the cost and time saved by patch automation

    "Endpoint Central's automated patching, resulting in time savings of up to 95%. For the composite organization, the time savings over three years come to"

    $913,000

    Cost savings of up to a million dollars and time reduction of 95% from patch automation using ManageEngine Endpoint Central

    

  • Cost savings of up to a million dollars and time reduction of 95% from patch automation using ManageEngine Endpoint Central

    Learn more

    

• • BYOD visibility

    • See how many personal devices are being used for work related apps with an extensive device inventory.
    • Manage licenses for business apps in BYOD and distribute them to work profiles.

    

  • Data containerization and security

    • Isolate and manage only work data on BYOD without violating physician's privacy.
    • Enforce strong passcode policies for work profiles to eliminate the chances of brute force attack in case of stolen devices.
    • Distribute sensitive content securely with screen shot and clipboard restrictions via MDM.

    

  • Privacy

    • Set restrictions on the information collected from BYODs and publish your privacy policy to these devices to keep clinicians informed.
    • Lock devices and remove business app access and PHI when devices are lost.
    • Wipe devices when affiliate hospitals leave your organization due to bankruptcy and contract expiry.

    

  • Secure access to business apps

    • Restrict access to business apps like Outlook and Office 365 for only MDM-registered BYODs.
    • Remove access to business apps from rooted and jailbroken devices.
    • Ensure version control for OS to ensure that devices with outdated OSes do not access business apps.
    • Enable certificate-based sign ins for apps like Epic Haiku and Canto, by distributing certificates via MDM.

    

  • When employees permanently leave, wipe just work data from BYODs.

    "My biggest concern was not being able to wipe everything work-related from their phone once they've permanently left the organization, and having that workspace container created with Endpoint Central is great for that."

    Network system administrator,

    Port Townsend-based community care in Washington, U.S.

    Learn more

• • Does your IT team rely on spreadsheets to track assets?

    With the procurement team usually raising concerns before bulk device purchases, an asset inventory spread across spreadsheets would be inefficient.

    

  • Keep inventory at a single spot and generate DIY reports

    "Asset tracking and accountability is a major challenge in healthcare IT, especially with constant acquisitions. ManageEngine provides a consolidated view of asset and endpoint data, allowing me to track assets from delivery to deployment, including location, department, and user. I can now pull reports myself in seconds, without relying on my team."

    " ManageEngine provides a consolidated view of asset and endpoint data, allowing me to track assets from delivery to deployment, including location, department, and user. I can now pull reports myself in seconds, without relying on my team."

    Senior director of IT infrastructure,

    leading New Jersey based healthcare system in the U.S

    Learn more

• • Visibility & security across diverse browsers to prevent ransomware entry on endpoints proactively

    • In most cases, a ransomware attack starts with an innocuous browser download, which could have been nipped in the bud.
    • In most cases, a ransomware attack starts with an innocuous browser download. Lock down browsers using Endpoint Central

    • Lock down browsers using Endpoint Central

      “We adopted Browser Security Plus, an add-on to Endpoint Central, to close a major visibility gap in Edge and Chrome. It gives us the controls to allow only approved extensions, monitor potentially malicious sites, and restrict certain risky downloads that previously bypassed our EDR."

      "Endpoint Central's browser security module gives us the controls to allow only approved extensions, monitor potentially malicious sites, and restrict certain risky downloads that previously bypassed our EDR."

      Director of IT security,

      Parasmus-based healthcare, New Jersey, U.S.

  • Preventing patient records from leaking through personal Gmail accounts

    

    Challenges

    • Employees storing notes in personal Google Drives
    • Blocking personal Gmail accounts would impact employees' bookmark storage

    

    Solutions

    • Leadership buy-in: The IT director plans to create a detailed policy for approval by the chief patient health and quality officer.
    • Operational alignment: The help desk will write guides for employees on how to migrate their bookmarks to their work profile.
    • Technology enablement: IT will use Endpoint Central to remove personal Gmail accounts from all browsers.

    • Clinicians often save notes on personal Google Drives, which can put PHI outside the EHR systems.
    • Remove personal Gmail accounts from all browsers using Endpoint Central to prevent PHI storage on personal accounts.
    • Make this transition from personal accounts to work profile easy for users, by circulating migration guides via managed mobile devices, to migrate important bookmarks and extensions.

  • Monitor web activity for litigable and forensic investigations

    Why is it done?

    Litigable investigations

    When a physician sues your company, have visibility into what they were searching for or what data they were exchanging on the web.

    Forensic investigations

    During a security incident, risk assessment partners want visibility into the web activity of all employees on that day.

    During a security incident, provide visibility into the web activity of all employees for risk assessment partners.

    How was it done?

     

    With Endpoint Central

    “With Endpoint Central, I get to see at an end-user level what employees are doing, why, and what browsers they are leveraging, even for remote workers. I can also control the extensions that are being installed, which is ideal for me. People like to install random stuff that they shouldn't.”

    Director of IT security,

    Parasmus-based healthcare, New Jersey, U.S.

     

    Without Endpoint Central

    “Previously, I'd have to go in the back door into the users machine and download the temporary Google database on the LiteDB for browser history. I would reconstitute that browser history in my own view in SQLight Viewer. That's how I was able to document the browser history of that person.”

    Director of IT security,

    Parasmus-based healthcare, New Jersey, U.S.

  • Reduce attack surface beyond browsers

    Ensure that security goes beyond the browser layer, with application control, device control and data loss prevention from Endpoint Central.

    

• • Cut down on time and cost for device provisioning during EHR adoption, IT asset overhaul and staff turnover.

    • Purchase, image, and provision assets to the acquired practices to instantly bring them under the parent firm's IT policies.
    • Create a golden image with the organization's IT policies and layer person-specific apps on top of it
    • Proven Results: Saved $22k and cut device setup time from 30 days to just 20 minutes for a Philadelphia-based NPO using Endpoint Central.

    Read the case study

    

• • Reducing time and complexity in EHR client app distribution

    

    Challenges

    • Client apps interacting with Epic's EHR needing special scripts during installation
    • Manually running the scripts on every machine using the Command Prompt

    

    Solutions

    • With Endpoint Central, the company configured 11 post-deployment automations in sequence to customize software deployment, like changing registry keys, setting up the client to point to the server, and auto-populating desk icons.

    • Share asset inventory data with Epic to distribute Epic clients to employee devices.
    • Run post deployment automations while distributing Epic clients at scale and enable interoperability.

    "Endpoint Central enables me to run 11 post-deployment scripts in sequence to customize software deployment, like changing registry keys, and setting up the client to point to the server. This saves me a lot of time"

    Network system administrator,

    Port Townsend-based community care in Washington, U.S.

  • Secure mobile workflows to Epic EHR

    

    Gain asset visibility for managing Epic deployments

    Healthcare organizations with multiple clinics struggle to collect device information to deploy Epic apps like Haiku and Canto, and end up doing it manually. Consolidate data from mobile phones and tablets into one platform.

    Consolidate device data from mobile phones and tablets across multiple clinics to manage Epic app deployments.

    

    Secure BYOD for clinicians by partitioning from personal information

    Physicians using personal devices to access EHR? Containerize Epic apps on physician devices, and have control over these containers without touching their personal space in the device

    Containerize Epic apps on physician devices, and have control over these containers without touching their personal space in the device

  • Manage shift worker devices accessing EHR

    

    Location tracking and lost mode for mobile devices

    Mobile devices are often lost or misplaced by physicians during emergencies and rounds. Implement location tracking, lost mode, and data protection (camera/screenshot restrictions), or even wipe lost devices, all from a single console

    Implement location tracking, lost mode, or remote wipe for devices that are lost or misplaced by physicians during emergencies and rounds.

    

    Set-up devices in shared mode for shift workers, based on their departments

    Enable multiple departments like renal transplant, pediatric care, rehabilitation services and pharmacy, with easy device handover after shifts. Set-up devices in shared mode with department-specific profiles.

    Enable multiple departments, like renal transplant, pediatric care, rehabilitation services, and pharmacy, to use shared devices with department specific profiles.

• • Remote help across your multi-site clinics, with RBAC to empower department-specific teams

    • 

      A physician from the affiliate organization has multiple files open with a troubleshooting session scheduled.

    • 

      The parent organization's IT team should ensure all files stay organized and accessible post session.

    • 

      IT remotely views the PC, guiding the physician via chat to save and minimize the files.

    • 

      Once ready, the physician grants consent, and IT takes remote control to troubleshoot.

    • 

      After the session, the physician seamlessly resumes work with all files intact and in place.

    "Earlier, we used UltraVNC for remote control, but it posed a massive security risk, especially when resolving issues related to electronic medical records. We wanted something more secure. Endpoint Central's remote control is HIPAA compliant and integrated natively into the existing agent. We love the role-based access control, which empowers Clinical Informatics and Imaging teams to troubleshoot EMR and PACS systems without relying on IT."

    "Endpoint Central's remote control is HIPAA compliant and integrated natively into the existing agent. We love the role-based access control, which empowers Clinical Informatics and Imaging teams to troubleshoot EMR and PACS systems without relying on IT."

    Network system administrator,

    Port Townsend-based community care in Washington, U.S.