Touchstone Security Healthcare Case Study
With CareSight Analytics
CareSight is an advanced reporting and analytics system that works with nurse call, patient monitoring, and alarm management middleware systems. Built around a visually rich modern web interface, the platform provides real-time and historical clinical alarm analysis for use by departmental managers and key executives of hospitals and health systems. CareSight’s dashboards and reports assist organizations looking to optimize safety, reduce alarm fatigue, and streamline workflows.
Assessment and Compliance
The CareSight system is a Microsoft SQL based multi-tiered software platform hosted in AWS. Touchstone Security was called upon in 2017 to assist with the overall architecture and performance of the system. The system was having massive performance and scalability issues. Touchstone began by assessing Caresight Analytics cybersecurity compliance requirements, including its requirements under the HIPAA Security Rule to ensure system changes would be in line with legal requirements. Touchstone then began a comprehensive performance analysis across the entire spectrum of the system, including agents, operating systems, database engines, database schema, communications, website front end, etc.
Our Unique Approach
We then designed an approach in concert with Caresight staff to address AWS Cost concerns, performance bottlenecks, and cybersecurity requirements. We began by optimizing the database servers and enabled us to move from four to two, resulting in substantial performance improvements. In addition, the overall architecture was changed to accommodate AWS Lambda services for stored procedures to further improve performance and enable rapid scalability.
The Conclusion
Finally, Touchstone Security made numerous cybersecurity enhancements to Caresight’s IT infrastructure and worked to ensure that all changes reflected security best practices and were fully compliant with HIPAA. At the end of the project, Caresight Analytics had a scalable, cost-efficient, and highly secure environment that enabled them to further expand their SaaS offerings without concerns over outages or compliance.