Practices for hospitals short of time and hands

Ransomware has closed Japanese hospitals' outpatient and emergency services for weeks, often after entering through a supplier's remote-maintenance equipment. I treat backups as only half of the answer. The other half is whether wards, pharmacy, laboratory and reception can work on paper for three days without improvising. We print medication, allergy and care-plan summaries every four hours on 34 standalone ward computers, hold paper drills on live wards twice a year and keep a dated list of what each drill exposed. I also rehearse restoration into an isolated environment, because a recovery time that has never been measured is a hope. I give clinical leaders the decision on which services pause during an outage; my department's job is to tell them honestly how long the pause may last.

Japanese hospitals often end up with heavily customised electronic records that only the original supplier can maintain, at prices set when there is no alternative. Having sold such work, I now negotiate the other side. I ask for a standard configuration with a short, priced list of approved changes, a full data export in a documented format at no extra cost, support terms with named response times and the right to approve or refuse every remote connection. I prefer seven-year terms with a break point to open-ended renewals. Clinicians help decide what must be configured locally; I make sure they see the long-term cost of each request. A supplier relationship works best when both sides know the hospital could leave, even if it never does.

Since medical institutions were required to confirm insurance eligibility online, the reception desk has become a point where public systems, patients' cards and our own records meet. Elderly patients forget a PIN, faces are not recognised, and a record may not yet reflect a change of employer. I design reception procedures so that a failed check never turns a patient away, the fallback is clear, and the reason is logged for later review. The same thinking applies to electronic prescriptions and to sharing medication history with patient consent. I describe these connections to our board in general terms and keep the operational detail with reception and pharmacy leaders. Each connection needs an owner, a fallback and a measure of how often it fails, and I report all three to the medical safety committee every quarter.

Our hospitals and care services compete for nurses, care workers and clerks in a shrinking labour market, and many staff work part-time or across sites. A system that needs two days of classroom training is a cost we cannot carry. I measure clicks, log-ins and screens for common tasks and remove what I can, even when a supplier's feature is more complete. Home-visit nurses use one tablet application rather than three. Since the 2024 limits on doctors' overtime, we also measure time spent in the record after the end of a shift and report it monthly to the medical director. Simplicity sometimes means refusing a request from a single department, and I explain that refusal in person to the people who asked for it.

Prefectural inspectors now ask hospitals about cybersecurity as well as clinical safety, claims are reviewed and returned, and accreditation surveyors ask to see evidence rather than policies. I want each of those questions answered from records we keep anyway. My department maintains access logs for the electronic record, a register of every supplier connection, drill findings with dates and owners, and quarterly reviews of returned claims with the medical affairs office. I do not let audit preparation become a separate project that pulls staff off wards for a week. When a record is missing, I report the gap to the board with a date for closing it, rather than hoping the next inspector will not ask the question. Evidence assembled only for a visitor tends to disappear the week after the visit.