Diversion Surveillance ranks all clinicians according to a Relative Risk Score. The software also identifies which clinicians have triggered a high-priority event during the prior day — or the last three days or seven days. This allows your team to prioritize their work and focus attention on the most recent events.
Each clinician’s RSS is re-calculated each day based on a rolling 30-day window, that is, diversion risks that have occurred during the prior 30 days. You can see how a clinician’s RRS is trending up or down in a historical view covering up to 180 days.
Diversion Surveillance includes more than 15 separate signals. Each signal is designed to detect a certain behavior that could indicate diversion. An “event” is generated when a signal has spotted a clinician engaging in that behavior. Each event contributes a weighted amount to the RSS. The riskier the event, the higher the points for that event. The sum of these contributions from events during the prior 30 days is adjusted using a transform process to produce an approximately normal distribution.
LogicStream Health’s has worked with hundreds of hospitals over more than nine years to develop a unique approach to integrating with electronic health record (EHR) systems. In addition to information from the EHR, the software also pulls information from automated dispensing systems (ADS), wholesalers, and time and attendance systems.
Diversion Surveillance includes an assessment of all employees who have EHR access and conduct medication transactions regardless of title or position.
Peer groups are defined as all employees who care for patients within a specific department and have similar responsibilities. For instance, nurses who work in the intensive care unit are compared to the nurses within that department to identify outliers and potential signs of diversion.
By default, Diversion Surveillance monitors transactions related to all Class II to Class V controlled substances. Users can easily add other medications and immediately begin monitoring those medications for diversion risk.
Yes, the default 30-day historical view can be expanded to show up to 180-days. In addition, the system displays a timeline for each clinician that includes all flagged events and prior investigations for an unlimited period of time.
Each health system customer may choose a lookback period for the raw data retrieved from sources systems — EHRs, ADSs, wholesalers, time and attendance. The lookback period can range form one to five years. The diversion signal results are retained for 180 days. Data for flagged events and investigations is retained indefinitely.
Yes. Protected Health Information (PHI) is required to conduct drug diversion investigations. Access to PHI can be restricted by your system administrator through user security roles. All access to PHI is logged and available for audit purposes.
The customer controls logins to the application, and what level of access each user has – ranging from read-only to full administrative access. The software has audit logs of activity.
The application is a SaaS solution. It stores non-PHI data in the cloud. LogicStream contracts with Microsoft Azure as our cloud-hosting provider. Health system customers may choose to either A) implement and manage an on-premise server environment to store PHI or B) rely on LogicStream to store PHI in the cloud.
Yes. Protected Health Information (PHI) is required to conduct drug diversion investigations. Access to PHI can be restricted by your system administrator through user security roles. All access to PHI is logged and available for audit purposes. PHI will be blinded for users that are not granted access. A business associate agreement (BAA) will be part of the agreement.
No, there are no dedicated, on-premise hardware devices. There is a requirement for customers to stand up and maintain an on-premise Windows server which is needed, at a minimum, to facilitate our out-of-the-box data integrations. This on premise server may also be used to store PHI (see above).
Yes. Every year, LogicStream Health has an independent third party assess its security, including administrative controls, internal-facing technical controls, external-facing technical controls, web application vulnerability testing, and web application penetration testing. We also undergo an initial and often repeating assessments as part of every customer relationship. LogicStream’s SaaS software is hosted in a SOC2 Type II and HITRUST-certififed data center (see https://docs.microsoft.com/en-us/compliance/regulatory/offering-home) and LogicStream is currently pursing its own SOC 2 Type II certification.
Yes. While The software is a SaaS solution, some software components will be installed on the customer’s on-premise server (see above), at a minimum, to process data extractions. This on-premise server may also be used to store PHI.
Yes.