Information Technology at HHS: Looking Ahead

1
Information Technology at HHS Looking Ahead

• Charles Havekost
• Chief Information Officer
• US Department of Health and Human Services
• January 23, 2007

2
HHS Background

• Big Agency with Brand Name Divisions
• Center for Medicare and Medicaid Services
• Centers for Disease Control and Prevention
• Food and Drug Administration
• National Institutes of Health
• and programs like Head Start and TANF
• gt5B/year in IT Spending
• gt2.5B in non-discretionary spending (esp. grants
  to states for systems supporting Medicaid and
  child support enforcement)
• gt2B in discretionary spending
• Full list of projects is publicly available
• //www.whitehouse.gov/omb/budget/fy2007/sheets/it
  spending.xls

3
Looking Forward IT Priorities

• The HHS IT priorities include
• Disaster and Pandemic Preparedness
• Consolidation, Streamlining, and E-Government
• Health IT
• IT Security

4
Disaster and Pandemic Preparedness

• Two perspectives Inward and Outward
• The Inward Perspective
• Ensure ongoing functioning of HHS
• Identify priority functions and capabilities
• Telework ensure surge capacity and security
• Enable work from anywhere for applications
• Enable unattended operation of systems
• Contingency plans for systems need to be up to
  date and tested

5
Consolidation, Streamlining, E-Govt

• Consolidation and Streamlining to Achieve
• Economy of Scale
• Commonality of Business Practices and Systems
• Helps COOP/DR efforts Transferability of Skills
  Hiring Pools
• Completed and Ongoing
• Email Grants Systems Financial Systems HR
  Systems Travel IT Capital Planning IT Help
  Desk
• Starting up or Planned
• Acquisition systems Correspondence Tracking IT
  Security services
• ICRAS for PRA clearance an example of
  grassroots E-Gov
• CMS Enterprise Data Centers and Enterprise
  Services Development

6
CMS Consolidation/Streamlining Efforts

• CMS Enterprise Data Centers
• From gt20 data centers into 3 integrated centers
  plus a testing center
• Redundancy scalability common security,
  reporting, management
• Deploy secure, high-performing applications on
  the Internet.
• Enterprise Services Development
• Multiple award IDIQ for 10-year 4 billion
  umbrella contract that includes a substantial
  role for Small Business
• CMS Goal ESD ID/IQ to account for 80 of all CMS
  IT services
• Industry Day (500 attendees) held on 12/7/06
• RFP was released 12/22/06
• Proposals are due 2/20/07
• Other endeavors include Integrated Data
  Repository Fee for Service Claims Processing
  Redesign Beneficiary E-Services

7
Health IT Efforts and Progress

• Health IT can help address critical health care
  needs
• CMS Efforts in Health IT include
• Personal Health Records for Medicare and Medicaid
  populations
• Electronic Prescribing, called for in Medicare
  Modernization Act
• Lots of other participation in Health IT at HHS
  in programs providing clinical care,
  bio-surveillance, adverse events

8
Health IT Efforts and the ONC

• National Agenda for Health Information Technology
• Widespread adoption of interoperable EHR within
  10 years
• Medical information follows the consumer
• Clinicians have complete, computerized patient
  information
• Quality-based competition
• Public health and bioterrorism surveillance are
  seamlessly integrated into care
• Nationwide Health Information Network
• accurate, appropriate, timely, and secure
  exchange of health info
• Phase I Four consortia four prototype
  architectures
• Phase II Trial implementations

9
Health IT Efforts and the ONC

• Security and Privacy
• Working group to make recommendations on identity
  proofing
• Authentication and authorization next
• Health Information Technology Standards Panel
• Certification Commission on Health Information
  Technology
• American Health Information Community webcast
  archives at //videocast.nih.gov

10
HHS IT Security

• Enterprise solutions for IT Security requirements
• Protect Personally Identifiable Information and
  respond to breaches
• Encrypt data on laptops and other data
• More White Hat penetration testing
• More selective role-based access to systems and
  data
• Awareness training to cover wider range of
  subjects
• Security at contractors and outsourcers
• Assess success, including FISMA compliance and
  audit results
• Build security in rather than Bolt security
  on

11
Exhortations to Excellence

• HHS and vendors are partners in many projects
• Help move from monolithic legacy systems to
  modular, forward-thinking systems
• Data standards, well-defined interfaces, re-use
  of data and modules dont re-create the wheel
• This is not easy we need to work together

12
QA

• Charles Havekost
• HHS Chief Information Officer
• charles.havekost_at_hhs.gov