Posts Tagged ‘Pascal Helou’




What are the risks involved in technology outsourcing?

Wednesday, March 4th, 2009

By Pascal Helou

New York, NY - Technology outsourcing is the process of having part or all your technology functions performed by a third-party firm. You need to consider all risks involved before you fire your technology staff and outsource you technology support functions to reduce costs. A study performed by the University of Missouri in 20001 reported that more than 35 percent of the outsourcing arrangements failed. What I advise is selective outsourcing. Keep enough of your expertise in-house, outsource what makes sense.

The main areas of concern are dependency and lack of control, information security and legal issues. Once you fire all your technology staff and make the switch, it becomes very difficult to change your mind, make changes or seek a new partner. The third party vendor will hold all the cards and you no longer have any in-house expertise. They in effect have all the power. The third party vendor can raise fees as contracts expire and you have no leverage to negotiate.

Dependency and Lack of Control - The first thing you loose when you outsource is control. The ability to make changes to the network, systems or any technology or service is greatly limited and may require a new contract.

Information Security - Any emails, documents, client lists, financials, documented competitive advantages, trade secrets, projects in the works are now in the hands of a third party. Any breach of your data can have severe detrimental impact on your image, company status and financial health. You have no way to know if the third party is taking proper steps to safeguards your data or are cutting their costs. Your data can easily be mishandled, lost or stolen and you may never be notified for fear of retribution. They may even use sub-contractors that have no interest in protecting your data and who may see an opportunity to make a quick profit from your private data files. This happens more with non-US based firms especially in India.

Legal Consequences - The legal consequences are the greatest threat to an organization that outsources its infrastructure. Most outsourcing firms offer services on a “as is” basis meaning they are not liable for the results of their services. If there is a breach of confidentiality, loss of data, the outsourcing firm is not liable.

Fiduciary Requirements – Any fiduciary requirements that you may have with your clients do not apply to a third party vendor. A careful assessment has to be reviewed of the risks before proceeding with a third party vendor.

Copyright Infringement - Copyright infringement is another potential liability when software is shared with the outsourced firm.

Conclusion

What I recommend is selective outsourcing. Keep the key knowledge in house and have a local outsourcing firm do the heavy lifting. Partner with a local credible technology firm that has as much to gain as you do from the arrangement. Speak to as many clients of the third party as possible who are in the same industry and are of similar size. You can always contact us and we will be happy to give you a free consultation and or point you in the right direction!

Endnotes

1 Gay, Charles E.; James Essinger; Inside Outsourcing: The Insider’s Guide to Managing Strategic Sourcing, London, Nicholas Brealey Publishing, 2000




How to secure patient information in a medical practice

Wednesday, February 11th, 2009

By Pascal Helou

New York, NY - Security seems to be the last thing on a doctor’s minds when they open and run a practice. Security goes hand in hand with liability and HIPAA rules. Failure to comply with HIPAA can result in the following:

 

o     HIPAA allows both civil and criminal penalties, including fines and possible jail time.

o     HIPAA allows fines of up to $100 for each violation of the law, to a limit of $25,000 per year for violations of the same requirement.

o     Criminal sanctions for knowing misuse or disclosures carry fines of $50,000 to $250,000 and one to ten years imprisonment.

 

Having said that, there have been only a few fines actually imposed. The liability equation changes drastically depending on the types of patients you have. There are countless lawsuits where the staff is involved in leaking patient information to the media about celebrity patients.

 

Securing your office involves two main areas of focus: data that is paper based and data that is electronic. Paper based records need to be secured in locking storage rooms and or locking filing cabinets. All paper that contains patient information needs to be shredded. Unfortunately most practices that I perform an audit on do not shred their garbage where photocopies of patient IDs, credit cards, medical information end up when the printer, fax or copier do not perform properly. This is still the biggest threat and easiest to fix with a paper shredder.

 

EMR systems are great for office efficiencies but are more complex to secure.

The following is a basic outline to secure your medical practice and reduce your exposure to possible liabilities:

 

General Guidelines

  1. Determine all points of entry into your network (DSL, VPN, Dial-up modems).
  2. Make sure all entry point devices have passwords and are not set to factory defaults.
  3. Make sure you have a firewall installed between your network and the Internet. The firewall needs to also have a password that is not the factory default.
  4. Make sure all wireless access points have encryption enabled.
  5. Make sure all computers have screen savors with passwords. Also make sure the password is not taped to the screen! Still the most common breach.

 

Technical Guidelines (performed by a security expert)

  1. Run a network scan to determine how many computers and network devices are attached to the network. Removed all non-approved devices.
  2. Run a port scan on every network attached device to determine each device’s vulnerabilities. Close all non-required ports.
  3. Run a port scan on the firewall from outside the office to indentify any unsecured ports. Close all non-required ports.
  4. Review firewall logs for any intrusions. Reports any suspicious activity.
  5. Review workflow and how staff handles patient records. Make recommendations.
  6. Force staff to change passwords monthly. Don’t allow them to tape password to monitor.
  7. Standardize the desktops. A typical audit returns computers with Windows 95, Windows 98, NT, XP and Vista. Migrate all computers to one standard operating system such as Windows XP or Vista.
  8. Remove all non-work related software. Music and file sharing software pose risks.
  9. Check for remote desktop access software that users install to bypass the firewall and gain access to their desktop. (LogMeIn.com, GoToMyPc.com, VNC)
  10. Make sure computers have virus protection that is up to date.
  11. Make sure computers have a firewall running.
  12. Turn on the screen savor with password protection to protect against the cleaning staff.
  13. Make sure all patient information that is thrown in the trash is shredded.
  14. Create procedures to properly secure patient records. (Don’t leave a patient folder in an exam room. If you view patient records on a computer in the exam room, make sure you lock the screen when you step out. Don’t leave patient files in the back seat of your car.)

 

Once your network is secure, your attention needs to be focused on training and staff behavior. In just about every office I visit, the staff has downloaded music applications with some applications used to find music on the internet. What starts as a harmless act of simply trying to have music to pass the time on slow day’s turns into exposing the whole network to Trojans and Viruses. The computer is compromised even with the latest anti-virus software and firewall because the user was tricked into downloading harmless looking software bypassing all safeguards. The first thing the programs do is disable the anti-virus programs and Microsoft software updates. This leaves them free to propagate throughout the network.

 

Conclusion

Security is not a one time event. Security needs to be built into every process. I do a complete audit when I start a project and close all discovered vulnerabilities. Clients like a monthly or random security scan to discover if the new policies are being followed. You can always contact us and we will be happy to give you a free consultation and or point you in the right direction!




What does it cost to process a patient?

Sunday, January 11th, 2009

By Pascal Helou

 

 

New York, NY – The best way to dramatically reduce your costs is to fully understand where your costs are generated. The cost to process a patient is your single greatest costs other than your fixed costs such as equipment, rent, utilities and salaries. We need to determine the time spent by each person involved in processing a patient from the fist time the appointment is made to the payment of the encounter.

 

Focus on the following:

o     List all forms used for each step.

o     Identify who handles these forms and how much time they spend performing the process.

§         Time spent pulling, filing, and locating patient charts.

§         Handling prescription refill requests.

§         Mailing patient notes.

§         Processing patient check-in/check-out.

§         Transcribing dictation and recovering lost dictation due to misdirection or data corruption.

§         Time spent trying to locate lost charts.

 

The following table lists the typical steps involved from the time a patient calls for an appointment till the time the encounter is paid. Go through this table and add the time spent by each staff member at each step that applies.

 

Typical Patient workflow

Pre Patient visit

Physician

Clinician

Nurse

Front Office

Back Office

Other Staff

Admin

1.        patient calls and makes appointment

 

 

 

 

 

 

 

2.        scheduler gathers demographic information

 

 

 

 

 

 

 

3.        precertification is required if patient is covered by managed care

 

 

 

 

 

 

 

4.        process referring information if patient was referred

 

 

 

 

 

 

 

5.        patient folder is prepared

 

 

 

 

 

 

 

Patient Encounter

 

 

 

 

 

 

 

6.        insurance card copied, demographics verified

 

 

 

 

 

 

 

7.        medical assistant gathers vitals, allergies and current medications

 

 

 

 

 

 

 

8.        physician encounter

 

 

 

 

 

 

 

9.        patient scheduled for lab, tests, follow-up

 

 

 

 

 

 

 

10.     precertification is required if patient is covered by managed care

 

 

 

 

 

 

 

11.     ABN must be defined and signature required

 

 

 

 

 

 

 

12.     collect co-payment

 

 

 

 

 

 

 

Post Patient Visit

 

 

 

 

 

 

 

13.     physician documents patient encounter through dictation and/or notes

 

 

 

 

 

 

 

14.     physician interprets test/lab results

 

 

 

 

 

 

 

15.     nurse calls patient with lab/test results

 

 

 

 

 

 

 

16.     dictation transcribed by transcriptionist

 

 

 

 

 

 

 

17.     patient documentation forwarded to referring physician

 

 

 

 

 

 

 

18.     coding reconciles procedures and diagnoses

 

 

 

 

 

 

 

19.     claim filed to primary insurance

 

 

 

 

 

 

 

20.     patient receives primary EOB

 

 

 

 

 

 

 

21.     primary claim processed and adjusted

 

 

 

 

 

 

 

22.     claim filed to secondary insurance

 

 

 

 

 

 

 

23.     patient receives secondary EOB

 

 

 

 

 

 

 

24.     secondary claim processed and adjusted

 

 

 

 

 

 

 

25.     statement sent to patient

 

 

 

 

 

 

 

26.     patient receives statement

 

 

 

 

 

 

 

27.     billing staff handles patient questions and calls

 

 

 

 

 

 

 

28.     patient submits payment

 

 

 

 

 

 

 

29.     patient payment processed

 

 

 

 

 

 

 

30.     encounter paid

 

 

 

 

 

 

 

Total hours spent by each person involved in the process

 

 

 

 

 

 

 

Hourly rate for each person involved in process

 

 

 

 

 

 

 

Total cost in hours for person involved in process

Hourly rate x total hours spent by each person

 

 

 

 

 

 

 

Total cost to process a patient

(add the above row)

 

Number of patients process per month

 

Total costs to process patients

(number of patients per month x cost to process a patient)

 

 

Once you quantify the total cost to process a patient, you can begin to indentify the areas for the greatest potential for cost savings. Take a look at technologies such as EMR. Perform the same exercise with the notion that you have already implement the EMR solution. Run through the numbers again in the above chart with an EMR process flow to see what kind of savings you can expect.

 

You will see that the total cost to process patients can be reduced by 50%-85% by implementing an EMR system. Transcription costs can either be eliminated or drastically reduce in a well designed template system.

 

Conclusion
You cannot begin to reduce your costs unless you understand where your costs are coming from. Perform an audit and document everything involved in processing a patient including every system and form used. Once you determine where the greatest costs are generated, you can begin to look at technologies that will reduce those costs.




How to hire a consultant for your medical practice for free?

Thursday, December 11th, 2008

By Pascal Helou

New York, NY - Every medical practice can always benefit from an outside perspective on their business. The first thing that you must do is be honest with yourself. Change is not easy and you must be ready and willing to accept positive and negative criticism. A good consultant will tell you the truth, not exaggerate and give you options. They are on your side and are looking out for you, helping you avoid major mishaps, reduce costs and advise you of new technologies that can drastically improve efficiencies and increase your bottom line. I run my practice like an accounting or law firm but focus on business technology. The focus is always on how to align technology to help a practice run more efficiently, provide better services at a lower cost.

A question I am always asked is I am not sure I can afford this and how much does all this costs? The real question is whether you can afford to continue to do business as you currently are. Inefficiency can cost you hundreds of thousands each year while increasing your risks and reducing your bottom line. Proper use of technology results in increased efficiencies and higher profits. Increased efficiencies allow you to drastically reduce costs by having less staff or by having your staff do much more.

Here are the possible savings from implementing an EMR solution:

o     Labor cost savings of $40,250 per year per physicians: It costs $25,000 to $40,000 in labor costs per year per physician by not using an EMR solution and staying in paper. Switching to an EMR solution was demonstrated in a Congressional testimony in 1999 that will save $40,250 per year per physicians. A simple EMR solution can cost as little as $10,000, be implemented in 1-2 days and begin making money for you instantly.

o     Paper storage savings of $32,500 per year: A typical space used to store the paper records is on average 500ft2. The average costs for space in NYC of $65 per square foot leads to savings of $32,500 per year. An EMR solution eliminates this expense.

o     Transcription cost savings of $36,000 per year per physicians: A well designed template system in an EMR can eliminated or drastically reduce transcription costs.

o     There are many other costs such as reduced errors, increased collections do to less time required to access information, less risk and lost files.

A 3 provider office yearly savings after implementing an EMR = $261,250 in first year and $1,306,250 after 5 years.

Conclusion
The biggest hurdle you have is to jump in since you are already paying for working inefficiently. Make the investment and start saving hundreds of thousands each year!

The best way to proceed is to hire a local business technology expert to review your office and perform an audit. A technology expert who works with many similar practices can bring tremendous value and insight from other practice implementations, systems and failures. Just like you rely on an accountant for your accounting needs, rely on a business technology advisor for all your technology needs. The key is finding the right set of skills in a technology advisor.

The best technology advisors will have deep knowledge of your business needs, understand the breath of technology that is used in a medical practice, are not tied to any particular solution or technology, are attentive to your needs and are flexible and creative in their solutions. Most of all, they need to have that illusive skill that few true technology experts have, people skills!




How to properly select the best medical practice software

Tuesday, November 11th, 2008

By Pascal Helou

 

New York, NY - Selecting medical practice software falls in the following categories:

o     Someone (doctor, office managers) knows someone that has similar software and they “like” it.

o     Vendors are invited to give proposals but the process of comparing the proposals is challenging at best. It is very difficult for non-area specific experts to be able to compare software features, technologies and price. Vendors will tend to give a low price for a basic solution but the real solution that the office will need may be multiples higher in final cost. They rope you in with a low price than add on fees dramatically once you are locked in.

o     The doctor or office manager reads a glowing article on a software solution and decides to implement that solution based on the article written.

 

I have been in many situations where I was brought in to help resolve the result of poor decisions that have left practices in chaos with angry physicians, frustrated staff and unhappy patients after months of wasted efforts and at a tremendous cost leaving the practice worse off than they started! So how do you go about ensuring a successful selection of the right software for your medical practice?

 

Steering Committee

o     A steering committee needs to be created that is accountable and is comprised of the best people from all areas of the practice.

o     Each person is a stakeholder and represents a specific area of the business in the practice.

o     The steering committee leadership needs to have deep technical, project management skills as well as a good understanding of the current work flow of the practice. They will rely on each of the stakeholders to properly define the needs and requirements of their areas.

o     There has to be a commitment and practice management must make the team members available and dedicated for the process to work.

 

Defining goals and objectives

The process of selecting a practice software solution at this stage is more based on the business needs and politics than on technology.

o     Indentify immediate and long term practice goals.

o     Clearly outline the business goals and direction. This includes any planed new service offerings, any changes in reporting requirements, changes in office situations and a review of the current systems that are in use.

o     Generate a document with clear goals and objectives, list of major features that are required, any specific technological limitations or requirements, list of systems that the new practice solution must be able to interface with, general timeframe and budget.

 

Performing an audit and mapping out workflows

Most software implementations fail because people throw money at a vendor who intern drops a solution into a practice with little training. This process is doomed to fail since even the best software cannot fix an inefficient or ineffective workflow!

 

Medical practices rely on information from many systems both internally and externally. Just adding technology will not necessarily improve your practice’s productivity. It has been shown that simply introducing new technology usually results in decreased productivity. The staff must maintain the current way they do their work while learning a new system. Adding new technology to an inefficient workflow does not result in efficiency gains.

 

It is amazing how many times people do things but no longer remember why they do those things. In one practice, one staff member was dedicated to filling out and processing certain paperwork that was sent to another department. The other department had changed their policies long time ago, failed to notify the other department and simply threw out the paper work! The best way is to map out the current workflow of all processes in the practice.

 

o     Perform an audit trail of the patient encounter form as it travels throughout the office workflow.

o     Document every system that provides or receives information from the patient encounter and the people involved.

o     Document the workflows.

o     Having a detailed map of each process, the people and systems they involved is critical to properly selecting the right software solution, maximizing efficiencies and ensuring a successful implementation.

 

Defining your system requirements

o     Start by the things you can’t or don’t want to change such as the need to be able to interface with system A, B and C, the need for a multi-office solution or the need to support key business requirements.

o     Reduce the number of vendors by the capabilities outlined in your requirements, by costs and by complexity.

o     Call your colleagues with similar practices and see what they have done.

o     Create an RFP (Request For Proposal) and distribute your request to the top vendors that have passed your initial minimum requirements.

 

System review and selection

o     Start by eliminating any system that does not meet your system requirements. Many vendors will say that is planned in the next release. If it isn’t in the system now, don’t count on it being there any time soon or for free.

o     The software must be able to work with existing systems.

o     Many vendors promise that their system can interface to many systems. What is usually not disclosed is that this sometimes requires special programming and can be very expensive.

o     Request a demonstration of the software once you have the vendor proposals. Make sure what is demonstrated is what you will be buying with all the features you will need and includes all costs. Many vendors show their top fully loaded application then sell you an entry version at a much lower cost to get you in the door. You end up spending so much more just to get to where you thought you had purchased.

o     Each team member needs to review the software from their area’s perspective.

o     A new process map needs to be created with the new system in mind so that each stakeholder can see how this will impact people’s tasks and ultimately show how the new software solution will streamline current workflows and result in new efficiencies.

o     Try to visit an office that is similar in size and scope as yours that has the software you are looking to implement. Interview many people involved in the process and try to get as many lessons learned as possible.

o     The final step is to select 3 top vendors and negotiate on price. Get everything in writing and do not accept any verbal promises.

 

Before signing a contract, closely review the contract with a technologist!!! I don’t know how many times I have reviewed contracts that were full of thousands of dollars in unnecessary line items. For every $100,000 contracts, at least 25% were things added that were not necessary for the success of the project. One client had a $25,000 option for an EMR solution that they had paid for as part of a much larger practice software package. I was doing an audit for the client when I made that discovery. They approached the vendor to implement that option. The vendor stated that since the software was purchased 3 years ago, the hardware and software has changed so much that it is now obsolete. It will cost them an additional $50,000 if they want the EMR option.

 

Conclusion
Selecting and implementing an EMR/Practice Management system is a complex undertaking that requires commitment from everyone that will be using the system. A committed steering committee is critical, clear objectives and goals, a detailed process map, workflows, system requirements are all critical to the proper selections of an EMR system. Keep in mind that more than 50% of EMR implementations fail because of improper technology selection, poor planning, lack of commitment and lack of training. One way to make sure your implementation is a success is to hire an independent third party technology consultant that is not associated with the vendor but is rather your hired technology expert. Their sole job is to make this a success while everyone else in the process has their real job to do as well. They will flush out which solution is best suited for your needs, project manage the implementation and keep the vendor honest. Their keys strengths are business and technology skills, strong project management and people skills. You can always contact us and we will be happy to give you a free consultation and or point you in the right direction!