46 articles · Operations & Workforce · page 3 of 3
Articles
Week of 12 October 2020
Why one phone call beat Twitter’s login controls
No clever code, no exotic exploit. New York’s report on the Twitter hack traced it to a phone call and a fake login page. The people who verify callers and reset logins turned out to be a security control few had designed or measured.
Week of 21 September 2020
What a nationwide EHR outage at UHS asked of nurses and unit leaders
Universal Health Services lost systems across its network in September 2020. The downtime binder mattered less than a human question: could staff trained on electronic records run a unit on paper for days, and then put it all back?
Week of 27 July 2020
Lifespan’s stolen laptop and the home office risk analyses missed
A laptop stolen from an employee’s car cost Lifespan $1,040,000. The July 2020 settlement turned on missing encryption, a weak device inventory and absent agreements, landing just as health care’s office staff moved home, beyond the reach of risk analyses written for hospital buildings.
Week of 6 April 2020
Paycheck Protection: capital was easy, intake was hard
The Paycheck Protection Program opened on April 3, 2020, with a federal guarantee and a Fed facility taking care of the money. What limited lenders was taking in, checking and submitting applications, and how fast they could turn staff into an assembly line.
Week of 24 February 2020
Buildings intact, workforce gone: the scenario continuity plans skipped
As markets fell and federal health officials warned of community spread, most continuity plans still imagined losing a building. A pandemic takes away people, suppliers and the usual tools all at once, and plans had to be rebuilt and tested around those three losses.
Week of 3 February 2020
Iowa’s caucus app failed at rollout before it failed in code
The Iowa caucus app had a coding error, but the public failure came from a hard installation, untrained users and a backup phone line nobody had sized. Every agency launch carries the same three operational risks.