Conduct an assessment of Cyber Security and IT controls

This is a Less Involved QI – includes PIP QI measures

You know your practice and patients best, however, are you sure your data is protected from computer hackers or accidental loss? 

Could your business still run if your systems went down for an hour, a day, or a week? 

This QI activity leverages the people process and technology framework that has been around for many years. It will be a self-assessment based on several resources, coupled with an opt-in technical assessment to be paid for and resourced from an external party. 

This QI will challenge your current systems and processes and make you think seriously about data security. 

Goal

Increase team capability and awareness of good cybersecurity practices and help develop robust systems and processes to better safeguard patient data. 

Measure
  • Completed either self-assessment or optional third-party assessment
  • Plan developed to meet recommendations post-assessment
  • (Optional) Essential Eights Level 1 maturity
  • Re-assess annually to review what’s been completed and update plan for continuous improvement
  • All staff undergone Cyber Awareness Training
  • Conducted a non-physical simulation for staff
Starting point

PREPARE:

  • Discuss with your principal or owner. Leadership is critical to success.
  • Decide if you wish to complete an optional third-party assessment (may be cost to practice) OR conduct yearly self-assessment to ensure continuous improvement.
  • Speak with your IT about your decision and the intention for this to support quality improvement
  • Once decided, inform your staff so they are aware and understand the process and their role.

 

YEARLY SELF-ASSESSMENT:

  • Conduct a controlled, simulated, non-physical activity to further assess your organisations response to cyber security threats – Pick one of two Exercise in a Box
  • Bring the ‘team’ together, including staff, principle/owner and IT to discuss how to address each ‘immediate action’ area identified on report and observations from the activity conducted.
  • Develop PDSA based off feedback and agreed actions and priorities of the team.
  • Ensure you include cyber awareness training for all staff

 

OPTIONAL THIRD-PARTY ASSESSMENT (associated costs):

It is recommended that an assessment is conducted by a provider other than your current IT provider. 

  • Research & decide on third-party provider, you may wish to compare multiple quotes
  • Provider will conduct a semi-informal interview & conversation about the Practice IT systems, practices and processes
  • Practice will receive assessment report with recommended improvements (an example of the type of report is available here)
  • Bring the team together to review recommendations and brainstorm how to get it done. Listen. The more you involve staff and hear their thoughts, the more invested they will be in the outcome.
  • Develop PDSA based off feedback and agreed actions and priorities of the team.
  • Ensure you include cyber awareness training for all staff

 

Healthy North Coast held an expression of interest to identify providers who will work with general practice to conduct cyber security assessments. Below is the list of these providers that responded, however this list is not exclusive and there may be other providers in your region.

  • NoDa IT (Northern Rivers)
  • ClubIT (Tweed Heads to Port Macquarie)
  • Cloud Voice and Data (Ballina)
  • TCA (Tweed Heads to Port Macquarie)
  • C3 Group (Coffs Harbour and Port Macquarie)

It is recommended that an assessment is conducted by a provider other than your current IT provider.

 

STAFF TRAINING RESOURCES:

Possible improvement ideas
  • Provide the results from the third party assessment to your IT Provider to plan implementing improvements 
  • Normalise calling out poor practices so users feel safe in trying to improve. (no sticky note passwords, no sharing login details, lock the safe, set the alarm etc)
  • Ask the team for input. Are there any areas of improvement or suggestions for your quality improvement topic(s). You can even make it anonymous.
  • Add cybersecurity as a standing item on team meetings, including any staff awareness of security risks
  • Assign a quality improvement lead and have staff take turns in analysing processes and looking for improvement opportunities
  • Conduct a regular audit, making note of how you went last time so you can measure your improvements
  • Talk with peers and colleagues in neighbouring practices about their quality improvement activities and the impact it’s had on their practice and patients
  • Display flyers or updates around your practice, your patients will appreciate knowing their data is safe
  • Aim to meet Essential Eight Level 1 maturity or higher

 

Share your experience so others can learn from you 

  • Let us know what you are working on. Many topics in our library came from the work of practices in our region. These topics have had a great impact and go on to be picked up by other practices. 
  • Share your PDSA, no matter how detailed or simple. Every QI activity is an achievement to be celebrated in our region. We share them on our website and in our newsletter and are a great source of learning and inspiration to other general practices in our region. 

Let us know your progress on this activity

Our regional partners

  • Local Health District partners in our footprint: Mid North Coast Local Health District (MNCLHD) & Northern New South Wales Local Health District (NNSWLHD)
  • Aboriginal Medical Services (AMS)
  • The Royal Australian College of General Practitioners (RACGP)
  • Australian College of Rural and Remote Medicine (ACRRM)
  • Rural Doctors Network (RDN)
  • Rural Clinical Schools & Regional Training Hubs
  • General Practitioners
  • Registrars and International Medical Graduates
  • North Coast Allied Health Association (NCAHA)
  • Local Councils
    Pharmaceutical Society of Australia (PSA)
  • Universities including: Charles Sturt University (CSU), University of New South Wales (UNSW), Southern Cross University (SCU)

Aged Care Disaster Management Planning

Strategic Priority Area: One team

North Coast is identified as the region most likely to be impacted by climate change in Australia and also forecasted greatest growth in those 65+.

Healthy North Coast takes a lead role in ensuring the older population and the sector that supports them are prepared for, can respond to and recover from disasters and other emergencies.

We have led eight regional disaster management capacity building workshops, bringing together SES, community organisations and the aged care sector.

We have also developed disaster preparedness tip sheets for both residential and community aged care providers.

Voluntary Assisted Dying

Strategic Priority Area: One team

In May 2022, the NSW Parliament passed the Voluntary Assisted Dying Act 2022. Effective from Tuesday, 28 November 2023, eligible people have the choice to access voluntary assisted dying. 

Healthy North Coast has developed a webpage for both health professionals and consumers, with links to available information and resources.

Living with Dementia resources

Strategic Priority Area: No one is left behind

Healthy North Coast has worked with people living with dementia, their families and local service providers to develop an information booklet that will help them connect with local and national supports along their journey.

Highly regarded by a range of professional supporting those on or starting the dementia journey, the booklet includes commonly asked questions for people to ask their GP and/or specialist.

“It’s a fantastic resource and I give it to everyone on their first diagnosis. Its easy to read, so well planned and thought through and has lots of really useful information, tailored to the region.
I also find it very helpful when educating clinical staff.”

−Geropsychiatric Nurse Practitioner, Mid North Coast.

The resource is available in digital and printed copies, with more than 5,000 distributed across the region. An e-version is available to clinicians via the Dementia and Cognitive Impairment HealthPathway.

Deteriorating Resident Triage Tool

Strategic Priority Area: One team

Empowering aged care teams to deliver safer, more consistent care.

The Deteriorating Resident Triage Tool (DRRT) supports aged care staff to confidently recognise and respond to signs of resident deterioration. It enables timely, evidence-based decisions, strengthens communication with health services, and promotes early intervention and effective care planning, helping residents receive the right care, at the right time, in the right place. By doing so, it reduces unnecessary Emergency Department presentations and improves resident outcomes.

Developed in collaboration with a specialist geriatrician and informed by input from Residential Aged Care Managers, NSW Ambulance, GPs, and clinical experts across the Mid and North Coast Local Health Districts, the DRRT is practical, relevant, and aligned with contemporary best practice.

Aligned with the Strengthened Quality Standards:

  • Standard 1 – The Person: Respects resident preferences and Advance Care Directives.
  • Standard 2 – The Organisation: Strengthens governance and clinical oversight.
  • Standard 5 – Clinical Care: Supports early recognition and escalation of clinical deterioration.

North Coast care finders program

Strategic Priority Area: No one is left behind

Care finders is a free service to assist older adults connect to aged care services and supports. Care finders support older people who experience significant barriers to accessing services, and walk alongside their clients at their own pace, to understand their individual situation and support them to work through the steps to address their needs. Care finders assist people with access to other supports in the community. They can provide connections both with accessing services for the first time, and with changing or finding new services and supports if their needs change.

Care finders can:

  • Provide information about local aged care services
  • Help to set up an assessment with My Aged Care to access support, and
  • Find services that are targeted and available to help.

The care finder program has been extended to June 2029 and is provided by the following organisations. Each (Lismore, Coffs Harbour, Clarence Valley, Richmond Valley, Port Macquarie-Hastings, Kempsey, Nambucca and Bellingen) and Footprints (Kyogle, Tweed, Byron and Ballina).

icon with person and hands

Psychological services in residential aged care homes

Strategic Priority Area: Improving Lives Now

Healthy North Coast commissions two service providers to deliver psychological therapies and supports for older people with, or at risk of developing, a mental illness and who are living in residential aged care homes (RACHs).

The aim of the program is to both provide direct support to residents and their families and carers, as well as upskill the RACH workforce to respond to the needs of residents presenting with mental health concerns.

Healthy Towns. Healthy Communities.

Strategic Priority Area: Securing a Healthier Future

Connection and a sense of belonging are protective factors for both individual and community health and wellbeing. Evidence highlights that the social determinants of health play a critical role in addressing many of our regions health challenges.

That’s why Healthy North Coast has long been committed to supporting communities to strengthen and to build social health. Our initiatives, including contemporary ‘Social Prescribing’, help people to connect to activities, supports and each other, and assist communities to integrate services and bridge gaps.

icon with person and hands

Telehealth in Residential Aged Care

Strategic Priority Area: Improving Lives Now

The Royal Commission into Aged Care Quality and Safety identified several critical areas affecting aged care residents and our health system. Key challenges include:

  • Limited access to general practitioners (GPs) and allied health professionals in aged care facilities.
  • Difficulties accessing out-of-hours services

Telehealth offers valuable opportunities to enhance support for residents living in aged care homes. Funded by the Commonwealth Department of Health and Aged Care, this initiative provides telehealth equipment and staff training as part of the response to the Royal Commission’s findings.

By improving access to primary care clinicians, specialist services, and other service providers through telehealth, we can significantly enhance health outcomes for residents, reducing unnecessary hospital transfers and emergency department visits.

The selection of telehealth equipment was guided by our Healthy Ageing Strategy (HAS), a comprehensive digital discovery questionnaire, and consultation workshops with various stakeholders. These efforts included interviews with residents to understand their attitudes toward telehealth, ensuring the initiative meets their needs and preferences.

icon with person and hands

Greater Choice at Home Palliative Care Program

Strategic Priority Area: Improving Lives Now

Aims to provide people who have life limiting conditions the opportunity to exercise choice and receive high quality care at home, harnessing improved and better coordinated supports and services that meet their individual needs.

Program objectives:

  • Improve access to palliative care at home and support end-of-life care systems and services (in primary health care and community care)
  • To enable the right care at the right time and in the right place (to reduce unnecessary hospitalisation)
  • Generate and use data to support continuous improvement of services across sectors
  • Use available technologies to support flexible and responsive palliative care at home, including in the after-hours.

These objectives will contribute to achieving the following intended overarching outcomes of:

  • Improved capacity and responsiveness of services to meet local needs and priorities
  • Improved patient access to quality palliative care services in the home
  • Improved coordination of care for patients across health care providers and integration of palliative care services in their region.

Education & training funding elibility

Funding is open to all primary care providers within disaster affected communities across the Healthy North Coast footprint.

Workforce Locum support and R&R funding criteria

  • Available to primary care services in disaster impacted communities within the Healthy North Coast footprint.
  • Available to support short-term workforce coverage, allowing clinicians to rest and recover.
  • Workforce-support funding in total is capped for each site, over a 12-month period:
    • $10k for GPs and/or
    • $5K for nursing and/or
    • $5k administration support and/or
    • $5K allied/pharmacy and other.
  • Funding is not to be used to fill gaps in staffing that have not been able to recruit to and not to replace existing staff.
  • Healthy North Coast will assess requirements and approve available funding directly with the service requesting support.
  • Priority will be given to sites that have immediate, short-term workforce support needs.
  • Requests will be reviewed and supported on a case-by-case basis.
  • Program funding administered via RCTI Agreement (Recipient Created Tax Invoice) to be paid monthly, or on completion of the placement (whichever comes first).
  • Practices will be required to complete a request for payment form monthly, or on completion of the placement (whichever occurs first).

Wellbeing Flexible Funding Criteria & Eligibility

  • Open to all primary care providers within disaster affected communities across the Healthy North Coast footprint.
  • Activity must be purposeful, with the aim of increasing the wellbeing of your team.
  • Requests will be assessed on a case-by-case basis, with funding allocated based on team size.*
  • Following approval by Healthy North Coast, funding will be administered via RCTI Agreement (Recipient Created Tax Invoice) upon providing proof of expenses.
  • Funding cannot be used for the purchase of alcohol, or any other goods or services where the vendor cannot quote their Australian Business Number.
  • Planned activities must occur prior to 30th June 2024.
  • Funding will not be available for retrospective activities.
*Team Size
(Total staff and contractors)
Funding Available
Small (1-5)$500-$1500
Medium (6-20)$1500-$4000
Large (>20)$4000-$5000

Subscribe

* indicates required

Subscribe

* indicates required

Subscribe

* indicates required

Subscribe

* indicates required

Subscribe

* indicates required

Subscribe

* indicates required

Subscribe

* indicates required

Subscribe

* indicates required