Hospital systems have become almost totally dependent on computers, the internet, and electronic medical records (EMRs) to function. This reliance on technology brings vulnerabilities. In October 2020, the Federal Bureau of Investigation issued a warning of increased and imminent cybercrime threats to hospitals.1  One month prior, our hospital system, spanning 400 facilities, was the victim of the largest ransomware attack on a health care system in US history.2  At our university hospital, inpatient services endured 7 days of complete computer downtime (including loss of wireless internet) and 14 days of partial information technology (IT) recovery. Our ambulatory and hospital care are delivered by separate entities with separate EMRs and IT infrastructure. Consequently, downtime impact on ambulatory care was minimized as its EMR was not affected by the cyberattack. The major area of impact was delay in availability of laboratory, pathology results, and surgical and procedural reports.

Downtime challenged patient care, affected mass communication, and had a disproportionate impact on trainees. We speak from the perspective of impact on general medicine wards and information obtained through a comprehensive health system debrief that identified consistent areas of focus. Because care on general medicine wards relies on interaction with nearly all other departments, the internal medicine resident experience may be generalizable to other trainees.

Downtime began unexpectedly prior to morning sign-out, requiring the overnight trainees to provide patient care and handoff to day teams with only paper forms from the prior night. We quickly learned that our existing downtime processes, designed for brief scheduled downtimes, were inadequate to provide patient care during extended IT disruptions. As trainees experienced this disruption, they encountered unanticipated challenges. In most teaching institutions, trainees deliver the majority of direct physician-led care and often lack experience delivering paper-based patient care. Our internal medicine residency's “downtime processes” folder contained only paper templates for handwritten orders and progress notes. Within 21 days, this folder markedly expanded in size and scope. We hope other residency programs may learn from challenges we faced and institute preparations for potential extended downtime.

Our experience highlights the importance of a hospital-wide, coordinated, multidisciplinary downtime response plan. This response plan should include a special focus on trainee support. Based on our experience, we propose a proactive approach with focus on 4 areas: documentation, order entry, interdisciplinary communication, and centralized information (Figure 1).

Figure 1

Essential Components of a Coordinated Downtime Response

Figure 1

Essential Components of a Coordinated Downtime Response

Close modal
Figure 2

Sample Handwritten Orders and Notes Templates

Figure 2

Sample Handwritten Orders and Notes Templates

Close modal
Figure 3

Sample Handwritten Discharge Prescriptions

Figure 3

Sample Handwritten Discharge Prescriptions

Close modal

Documentation is the cornerstone of communication among health care teams. It serves to relay real-time information and forms a permanent legal record. Downtime immediately converts that record to a paper chart with loss of access to prior notes and results. Efficiently accessing and documenting in the paper chart is critical to ongoing care, avoiding medical errors, and creating historical records. Standard documentation templates (eg, admission, progress and nursing notes, discharge instructions, discharge summaries, prescription pads, standardized handoff forms) support standardized hospital-wide documentation processes while maintaining comprehensive documentation.3  Hospital-wide standardized chart organization and location are key to timely access of results. By agreeing on chart format proactively, programs can create a document that orients trainees to the paper chart as part of the “downtime processes” folder. This is important for all health care professionals and pertinent to trainees as they access charts most often for documentation and results review.

Many trainees lack experience writing unformatted medical notes. Along with standard templates, downtime procedures should include disseminating how-to documents for handwritten medical documentation (figures 2 and 3). We were surprised to realize trainees needed basic instructions, such as how to write a prescription: using black ink, drawing a single line through errors, avoiding Joint Commission “never” abbreviations, and including title, date, time, signature, printed name, and contact information on each note.4  Our downtime folder now includes the above templates, how-to documents, and examples to guide clear and effective documentation, transitions of care, and prescribing.

Electronic order entry makes patient care safer and more effective through suggested order details, predetermined order sets, and interaction checks.5  Hospitals like ours require electronic orders; trainees are unlikely to have experience giving verbal or handwritten orders, and decision support tools may make them less likely to carefully check interactions prior to prescribing. We recommend creating paper templates for the most common order sets, such as standard admission and discharge orders, and for the most common admission diagnoses. This approach would replicate in paper form the important roles of an electronic order set, including reminders for commonly forgotten orders.

Expectations for interdisciplinary communication, a cornerstone of safe and effective patient care during normal operations, remain critical during downtime. During normal operations, much of our communication occurs electronically. During IT downtime, emphasis must be placed on robust verbal communication and paper documentation. In our experience, specialty consultants had to be reminded of the importance of written notes documenting their recommendations, as several were inclined to rely on verbal communication only. These undocumented plans could not be verified by supervising members of the care team.

Some hospitals such as ours have replaced pagers and phone-based communication with hospital-approved free-text mobile applications (apps). At our institution physicians communicate with each other and nurses via apps on mobile phones and computer workstations. Downtime severed these essential lines of communication. In response, scheduled check-in times and multidisciplinary rounding with the patient, bedside nurse, medical team, and other support staff facilitated timely and effective patient care during downtime. We recommend utilizing templates to ensure efficient and effective multidisciplinary rounds. Such templates can also contribute to nursing documentation.

Communicating laboratory and radiology results created a unique challenge. Although our laboratory retained the ability to run specimens, results could not be entered into the EMR. Instead, “runners” brought paper results to medical units for filing into patient charts. It was important to have prespecified times of day for delivery of routine results as well as a system for rapid delivery and/or phone calls for “stat” results. We also realized that medical teams calling radiologists for results disrupted workflow. We recommend instead that radiologists keep a handwritten list with patient name, medical record number, type of study, and major findings at a central location in the reading room to be referenced. Full, handwritten reports can subsequently be brought to unit coordinators for chart filing as is done with other results. Adequate support for “runners” to relay results is necessary to avoid radiology or pathology trainees becoming the default “runners” with resulting loss of learning.

Frequent centralized information dissemination to clinicians and staff is critical during a rapidly changing environment that lacks email and “push” notification abilities. Frequent centralized updates, as well as those that are unit- or team-based, help ensure comprehensive communication and identify new issues quickly. For example, our trainees were initially unaware that white boards would replace computerized unit boards for patient location and assigned nurse, creating delays in care while trainees searched for newly admitted patients. This delay likely could have been prevented by proactive trainee education regarding downtime procedures.

Summary email communications are critical to ensure all health care professionals receive and can reference important information. This can be especially challenging if downtime also affects email access. Alternatively, we suggest centralized communication boards in each unit, where reference material can be posted and updated in real time. These boards relay important system updates, process changes, and IT recovery updates. At the same time, redundancy in communication modalities is crucial in a pervasive downtime. At our institution, the chief medical residents' office became the central location for dissemination of paper templates and verbal updates to trainees. Dissemination can also take the form of scheduled team huddles.

During our downtime, incorporating resident feedback in real time was key to identifying safety and system issues and instituting rapid changes. After full resolution of downtime, we conducted a debrief with trainees to identify impacts. Residents reported that educational conference cancellations during downtime reduced formal learning. Although objective data on work hours was lacking, trainees reported prolonged work hours, and many suspected they committed work hour violations. Trainees also identified positive aspects of downtime: more direct patient contact time and more robust interprofessional interactions. One resident said, “I felt most like a doctor during downtime.”

Large-scale downtime strains the balance between service and education for trainees. Creating a proactive, multifaceted plan focused on documentation, order entry, interdisciplinary communication, and centralized information may support trainees' ongoing education as well as meet work hour requirements.

1. 
Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS).
Joint Cybersecurity Advisory: Ransomware Activity Targeting the Healthcare and Public Health Sector
.
2021
.
2. 
Collier
K.
Major hospital system hit with cyberattack, potentially largest in U.S. history
.
NBC News
.
2021
.
3. 
Kuhn
T,
Basch
P,
Barr
M,
Yackel
T.
Clinical documentation in the 21st century: executive summary of a policy position paper from the American College of Physicians
.
Ann Intern Med.
2015
;
162
(
4
):
301
303
.
4. 
Joint Commission.
Official “Do Not Use” List
.
2021
.
5. 
Kuperman
GJ,
Bobb
A,
Payne
TH,
et al
Medication-related clinical decision support in computerized provider order entry systems: a review
.
J Am Med Inform Assoc.
2007
;
14
(
1
):
29
40
.