Software-related challenges in Swedish healthcare through the lens of incident reports: A desktop study

Operational disruption in healthcare associated with software functionality issue due to software security patching: a case report

Despite many benefits, the extensive deployment of Health Information Technology (HIT) systems by healthcare organizations has encountered many challenges, particularly in the field of telemetry concerning patient monitoring and its operational workflow. These challenges can add more layers of complexity when an unplanned software security patching is performed, affecting patient monitoring and causing disruption in daily clinical operations. This study is a reflection on what happened associated with software security patching and why it happened through the lens of an incident report to develop potential preventive and corrective strategies using qualitative analyses—inductive and deductive approaches. There is a need for such analyses to identify the underlying mechanism behind such issues since very limited research has been conducted on the study of software patching. The incident was classified as a “software functionality” issue, and the consequence was an “incident with a noticeable consequence but no patient harm”, and the contributing factor was a software update, i.e., software security patching. This report describes how insufficient planning of software patching, lack of training for healthcare professionals, contingency planning on unplanned system disruption, and HIT system configuration can compromise healthcare quality and cause risks to patient safety. We propose 15 preventive and corrective strategies grouped under four key areas based on the system approach and social-technical aspects of the patching process. The key areas are (i) preparing, developing, and deploying patches; (ii) training the frontline operators; (iii) ensuring contingency planning; and (iv) establishing configuration and communication between systems. These strategies are expected to minimize the risk of HIT-related incidents, enhance software security patch management in healthcare organizations, and improve patient safety. However, further discussion should be continued about general HIT problems connected to software security patching.

Characterizing patient details-related challenges from health information technology-related incident reports from Swedish healthcare

Introduction

Despite many benefits offered by Health Information Technology (HIT) systems, new technology brings new and unforeseen risks to healthcare quality and patient safety if they're not properly planned, designed, implemented, and managed. This study examined health information technology-related (HIT) incidents to identify patient details-related issues, their association with contributing factors, and outcomes.

Methods

Sources of information comprised retrospectively collected incident reports (n = 95) using two sampling methods, i.e., purposive and snowball sampling. The incident reports were analyzed using both the inductive method (thematic analysis) and the deductive approach using an existing framework, i.e., the International Classification for Patient Safety.

Results

The studies identified 90 incidents with 120 patient details-related issues-categorized as either information-related (48%) or documentation-related (52%) problems; around two-thirds of the 120 issues were characterized by human factors. Of the total sample, 87 contributing factors were identified, of which "medical device/system" (45%) and "documentation" (20%) were the most common contributing factors. Of 90 incidents, more than half (59%) comprised patient-related outcomes-patient inconvenience (47%) and patient harm (12%) and the remaining 41% (n = 37) included staff or organization-related outcomes.

Discussion

More than half of the incidents resulted in patient-related outcomes, namely patient inconvenience and patient harm, including disease risks, severe health deterioration, injury, and even patient death. Incidents associated with patient details can cause deleterious effects; therefore, characterizing them should be a routine part of clinical practice to improve the constantly changing healthcare system.