Case History

Project Management – Healthcare

Client Profile:

• Small Oklahoma hospital with approximately 350 staff, 150 network workstations, 12 servers
• Hospital very reliant upon Microsoft Outlook, with Exchange 2003 as e-mail server
• Stringent HIPAA requirements for security auditing

Project Objectives:  

• Design migration of 100+ user medical facility from Windows 2000 to Windows 2003
• Design and assist in migration of Exchange 2000 to Exchange 2003
• Design/implement user network perimeter security with firewalls
• Provide virtual private network (VPN) encrypted LAN access to remote users
• Design and implement Sharepoint Servers 3 deployment
• Enable Outlook Web Access (OWA) on Windows 2003 LAN, utilizing encrypted traffic
• Enable use of digitally signed, encrypted e-mail in conjunction with Exchange 2003
• Existing virus scanning was not centralized which prevented administrators from having a real-time picture of status of virus updates and infection status across the enterprise
• No centralized operating system update capability existed resulting in risks due to Windows operating systems being un-patched
• Client users were complaining of numerous issues, however no centralized database was available to allow prioritization

Project Results: 

• DVITS designed and implemented migration of servers from Windows 2000 to Windows 2003
• Internal security and information access auditing established
• Implemented enterprise-quality VPN firewall to allow establishment of strong perimeter security while allowing use of VPN for remote access to network.
• OWA implemented using Secure Sockets Layer (SSL) on the local network and from Internet.  This allows encrypted remote access to e-mail, schedules, and contacts thus simplifying collaboration for remote or traveling users
• Sharepoint Services 3 implemented allowed both internal and external secure collaboration
• Encrypted e-mail established in conjunction with Certificate Server and Exchange to allow HIPAA compliant exchange of e-mail
• Strategic consulting resulted in short- and medium-term technology plan of action
• Use of DVITS Autotask database allows consultants to work with the client in prioritizing issues based upon both usability and risk issues
• Use of Trend Micro Worry-Free Business Security to centralize virus/spyware/malware scanning was implemented resulting in over 2000 malware items being located and removed which had been missed by competitor anti-virus
• DVITS Managed Services implementation which includes patch management resulted in over 80% reduction in server and workstation missing patches