Business continuity plan in the management and operations of hospitals: First experience to certify the PDTA processes with the requirements defined by ISO 22301:2019 in emergency medical services

Abstract

Background: A business continuity plan (BCP) facilitates the performance of primary functions during emergencies or other situations that can disrupt normal operations. If risk management is done analytically, a business impact analysis (BIA), according to ISO 22301 certification, makes it possible to define the best strategy for supporting the company’s assets and image, optimizing the operational efficiency of service recovery and redesigning spaces for health. Since 2015, our healthcare company has embarked on a certification process for all sectors and activities through the implementation and development of diagnostic and therapeutic paths for operational diagnostic-therapeutic-assistance pathways (PDTAs). PDTA processes are all certified by the ISO 9001:2015 management system hospital. Our hospital is the first healthcare company to have obtained ISO 22301:2019 certification concerning PDTA processes, offering patients the highest standards of quality and safety of care in emergency medical services.

Methods: The formal BCP process includes several steps prior to the creation of a BCP: create a BCP team, conduct a BIA, determine the continuity plan by using the results of the analyses, and conduct training and exercises to educate staff and improve the BCP.

Results: From the BIA analysis, the team identified the time-employee PDTAs in company paths under emergency and urgency: acute ST-elevation myocardial infarction (STEMI), TRAUMA, and STROKE, providing for a planning path that took advantage of the duration of approximately 12 months. This path included the creation of structural procedures, the redefinition and updating of the PDTA in the light of the BCP, the preparation of exercises aimed at guaranteeing the business continuity objectives, and, finally, the awareness of our stakeholders regarding its correct application.

Conclusions: With a business continuity management (BCM) system, companies take preventative measures to ensure they can start operations again quickly in an emergency. An exhaustive BIA in a hospital company reveals the effects when processes fail, how critical each process is for the company, and the amount of time required to get up and running again, thus providing the organization with important information for risk management. The measures for handling risks derived from this analysis are incorporated into a BCM system where the emergency plans are defined, too, so that business operations continue even in the event of an emergency.