The Basics

This standard, which is new to this version of the standards, requires that the organization have a business continuity and emergency management plan for all program operations, including information systems both paper and electronic.  That plan must:

• identify essential systems and processes and assess the effect of an outage would have on the organization's program;
• identify how business continuity will be maintained over various lengths of time that the IT systems might not be available;
• be tested every two years;
• provide for a prompt response when problems are detected.

In addition to being familiar with the standard, you will be expected by the wreck reviewer to be familiar with your organization's business continuity plan itself.

Management Tips

The expectation behind the standard is that you will think broadly about the full array of events that could interrupt your essential operations.  Everything from natural disasters to terrorist attacks should be considered and incorporated into your business continuity planning.  Of particular interest to the reviewers will be extent to which that planning is tailored to your particular program.  They will want to know how you intend to ensure that consumers continue to have access to your services and medicines.

Because service interruptions may impact different parts of your organization differently, it is permissible to have policies and procedures written at the department level.  It is advisable, however, to have a corporate level business continuity plan that weaves disparate department-level plans together into a coherent whole.

URAC Accreditation Tips

The elements of this standard are, for the most part, is weighted 2; only the requirement of a plan for distribution of drugs during emergency is weighted 4.

For your AccreditNet submission, you may submit a mere outline of your full business continuity plan.

During the outside review, the reviewer will examine the full plan, interview various members of your staff at both management and staff levels, and to tour your site to assess your readiness for the implementation of your business continuity plan.  In addition, the reviewer will expect to see the results of the most recent test of your plan, along with any documentation of post-test action plans developed in response to that test.