Jeff Kelly

System Discovery   I’ve found that fixing RCM doesn’t start with technology, it starts with visibility. Before you fix RCM, you need to understand your system. Too often, we inherit workflows with “hidden” gaps that quietly cause denials, delays, and lost revenue. Those gaps rarely show up in the dashboards. You have to go looking for them. Blue Eagle SMEs bring the experience of 20+ hospitals to uncover: •          Broken processes •          Inefficient workflows •          Revenue leaks Discovery is the first step to transformation. In my experience, getting the right experts in early makes all the difference. #RevenueCycleManagement #HealthcareOptimization #HospitalFinance #BlueEagleConsulting

14

1 Comment

Healthcare IT leaders love to measure “uptime,” but clinicians measure experience in clicks and seconds. • A 99.99% SLA means nothing if every discharge takes 7 extra clicks. Ops teams must broaden what “availability” really means. • We’re piloting workflows where clicks removed and seconds saved are as critical as nines of uptime. That’s how AI and automation actually shift clinician trust. Question: What “micro-delays” in your systems would clinicians celebrate if you eliminated them?

26

1 Comment

CMS NEWS- Revised MSSP results are out. The impact? $40.4M in additional shared savings. 77% of organizations saw an INCREASE in their shared savings. My lingering question is are these results the final ones. In August CMS released MSSP results. A handful of industry leaders were caught by surprise because it was earlier than normal. Low and behold there was a mistake that was found. CMS left the results up but alerted the industry that there was an error and the results would be restated. Today those results were released with little acknowledgement. I find in mind blowing that 367 of the 476 organizations saw an increase in their shared savings payments. 3 of those organizations saw a total of $5.2M in increased payments. 8 organizations saw an adverse payment impact, the largest being a $15k impact. I will be diving deeper into results. However, I am not convinced that these are the final numbers. An industry colleague of mine said just last week a vendor noticed what may be additional mistakes made by CMS. How confident in you about your results? I would love to talk to organizations in MSSP to learn more about your approach, successes, and struggles.

66

9 Comments

Now live in Epic Toolbox: CLEAR’s MyChart integration allows patients to instantly verify their identity with an IAL2-compliant solution. With this out-of-the-box integration, healthcare systems can streamline access to sensitive health data at critical moments like MyChart account creation and recovery — reducing fraud while enhancing the patient experience. Learn more about CLEAR’s healthcare solution: https://lnkd.in/eb6vMmvj

101

5 Comments

Healthcare CIO’s Brief: Healthcare IT Security—Where We Stand Now 1. The Current State: Mounting Threats and Supply Chain Risk In the first half of 2025 alone, breaches impacted more than 29 million patient records via some of the largest data compromises reported to HHS’s OCR portal. Much of this stems from hacking and IT incidents; back in 2010, only 4% of breaches were due to hacking—today, that figure has surged to 81%. Ransomware remains a constant threat: 77% of healthcare organizations were targeted in the past year, with 53% of those attacks succeeding. And the ways attackers strike keep expanding—supply‑chain attacks compromised data of over 78 million individuals in the first half of 2025. 2. The Price Tag: Still the Most Costly Sector #Healthcare retains the unenviable title of the costliest industry for data breaches. IBM’s 2025 report places the average cost per breach at $7.42 million, down from $9.77 million last year, but still the highest across all sectors. A breakdown of costs reveals detection and escalation ($1.47M), lost business ($1.38M), and post-breach response ($1.2M) as the main expense drivers. Notably, healthcare breaches take the longest to identify and contain—279 days on average, nearly five weeks more than the global average. #cio #ciso

11

After reviewing a few feeds, articles, and pondering this month's activities, here is what comes to mind... Securing Healthcare: Protecting Patient Data as we modernize access for staff, providers, and patients. The healthcare industry is constantly attacked by cyber threats, making patient data security more critical than ever. With ransomware, phishing attacks, and insider threats on the rise, organizations must prioritize data protection to ensure patient trust and regulatory compliance (HIPAA, HITECH, NIST, PCI-DSS, HITRUST, FDA, CCPA, GDPR, etc.) just to name a few. Here are key strategies to strengthen healthcare cybersecurity: - Zero Trust Security: Assume no user or device is trustworthy by default—continuous verification is key. - Encryption & Access Controls: Protect patient data both in transit and at rest with strong encryption and role-based access. - Employee Training: Human error is a top risk. Educate staff on phishing, social engineering, and secure data handling. - Regular Security Audits: Identify vulnerabilities before attackers do so through proactive assessments and penetration testing. - AI & Threat Intelligence: Leverage AI-driven threat detection to identify suspicious activity and respond in real-time. With patient lives and trust at stake, cybersecurity is not just an IT issue—it’s a patient safety issue. Healthcare leaders must invest in robust security strategies to protect what matters most. How is your organization tackling healthcare cybersecurity? Let’s discuss it! What are your thoughts? #Cybersecurity #HealthcareIT #DataProtection #HIPAA #HITECH #NIST #HITRUST #ZeroTrust #PatientSafety

44

As cyber threats continue to evolve faster than traditional controls can respond, static access policies create blind spots that expose the business to unnecessary risk. As an industry, we are generating lots of data, but few operationalize the signals in a continious manner taking meaningful actions to reduce exposure. Adaptive trust policies represent a strategic shift enabling organizations to move from a reactive, one-size-fits-all approach to a proactive, context-aware security model that continuously aligns access decisions with real-time risk signals. By dynamically adjusting user and system access based on behavioral analytics, device posture, location, and threat intelligence, adaptive trust helps executive leaders: ✔️ Reduce the attack surface without compromising agility ✔️ Automate risk-based decision-making at scale ✔️ Enable dynamic least privilege across hybrid environments ✔️ Strengthen operational resilience and business continuity For CISOs, CIOs, and business leaders driving digital transformation, adaptive trust isn’t just a security enhancement, it’s a business enabler that ensures the right access, at the right time, under the right conditions. This is how modern enterprises stay ahead of risk, by making trust adaptive and actionable. #ExecutiveLeadership #CyberStrategy #AdaptiveTrust #DigitalRisk #ZeroTrust #OperationalResilience #CISO #CIO #BusinessContinuity #BoardLevelSecurity

23

1 Comment

This statement on information blocking could disrupt EHR vendors’ plans to corner the healthcare data exchange market. Here’s some quick background: EHR vendors like Epic, eCW, and Cerner set up (or are setting up) Qualified Health Information Networks (QHINs) that connect with other QHINs to form a national data exchange network. Healthcare provider organizations must decide whether to participate in the national network, and if they do, whether to join the QHIN that their EHR vendor offers or an independent one. It would have been tempting for the EHR+QHIN vendors to strongarm their provider clients into proprietary QHINs. The EHR vendors could have said things like: 🫸 “Choose our QHIN or you will be on your own to bring data from the national network into the EHR.” 💰 “You will have to pay us so much to ingest data from a competitor QHIN that you might as well join ours.” 🏆 “Joining our QHIN may be costly, but it would help you qualify for our Super Amazing Client Program and avoid costly EHR penalties. And we’ll waive our QHIN costs for a year or two.” ⏳“You could submit a request to bring data from a competing QHIN into the EHR, but it’s not really a priority for us and could take a while. Just join our QHIN.” The section of the FAQ document pictured below says that attempts to limit their customers’ ability to select a QHIN would be considered information blocking. EHR vendors that engage in such behavior could face monetary penalties and legal consequences. I agree with this guidance from ASPT/ONC. Providers and other organizations should be able to select the QHIN that offers the best services at the lowest price - not the QHIN that has the most leverage. EHR vendors that offer QHINs already have systems to connect with other QHINs to bring data into the EHR from the national network. They should allow their provider partners to bring life-saving clinical data into the EHR without forcing them into their QHINs. I’m looking forward to seeing whether the four-sentence FAQ response from ASTP/ONC will change the direction of the market on this. Perhaps you are reading this differently. What do you think? Will the EHR+QHIN vendors still convince most providers to join their QHINs? https://lnkd.in/gwgJTSvC

35

12 Comments

Took a peek at the Epic Toolbox categories in Showroom again. They continue to expand, with some fun new options since we last looked: Anesthesia Infusion Injectable Hardware Bayesian Medication Dosing Decision Support Digital Pathology Health Information Service Provider Home Dialysis Medication Ordering Decision Support Outpatient CDI (Risk Adjustment) Vitals Gateway and Middleware Device Integration Some of these are very popular use cases that are getting tons of attention lately, like digital pathology, risk adjustment, or the medication decision support categories. Others are well-established application workflows that Epic seems to be formalizing in Toolbox, like HISPs (have existed since MU2) or Vitals Gateways (every hospital worth their salt has a Capsule or another middleware aggregator for inpatient vitals) The difference between the Bayesian Dosing Decision Support (uses a SMART on FHIR app) and Medication Ordering Decision Support (uses CDS Hooks) is interesting to me.

30

5 Comments

One of healthcare’s biggest challenges is siloed data. Disconnected systems slow response times, duplicate efforts and impact patients and staff. In my recent commentary, I share why breaking down silos and modernizing IT infrastructure is essential to safer, more efficient care. Check it out: https://lnkd.in/gvY7X9v6

39

The Hidden Cost of Inaction: Prioritizing Device Replacement for Cyber Security in Healthcare    In the fast-evolving landscape of healthcare cyber security, outdated devices pose a significant risk. Older devices, while operationally functional, must be replaced to reduce software vulnerabilities. This helps build resilience against ransomware attacks, data breaches, and patient safety risks. Imagine a scenario where a device can no longer receive a security patch for a newly discovered vulnerability. Cyber attackers research and exploit these gaps, targeting the weakest link in what may be an otherwise robust system. Device replacement and/or isolation supports a more secure and resilient ecosystem. From a budgeting perspective, the cost of a breach, both financial and reputational, outweighs the investment in updating devices. As leaders, we must advocate for proactive planning and funding to modernize our infrastructure. The safety of our patients and the integrity of their data benefit when we do. #CyberSecurity   #DataProtection   #Ransomware   #PatientSafety   #HealthcareIT  #Windows11 #Sentara

68

7 Comments

Leading Beyond IT — Post 1 Theme: From IT Leader to Strategic Partner ⸻ Leading Beyond IT — Post 1 The role of the CIO in healthcare is changing — fast. We’re not just keeping systems running anymore. We’re shaping access, experience, and outcomes. I’ve seen firsthand how moving from an operational mindset to a strategic one changes the conversation — and the impact. This is the first post in my Leading Beyond IT series — a look at how healthcare CIOs can lead with influence and intention. 👇 ⸻ From IT Leader to Strategic Partner: What It Really Means to Be a Healthcare CIO Today In today’s healthcare landscape, technology isn’t just supporting the mission — it’s shaping it. That’s why CIOs can’t afford to stay siloed in infrastructure, upgrades, and support. If we want to drive real change, we need to earn influence across the organization — not by pushing tech, but by partnering around outcomes. The truth is, being a strategic CIO isn’t about doing more — it’s about showing up differently. ⸻ Influence doesn’t come from having the answers. It comes from knowing where the organization is going — and helping it get there. Here’s how I think strategic CIOs build meaningful influence beyond IT: 🔹 Speak the language of the business We’re not just implementing systems — we’re enabling care, access, and growth. But that won’t come across if we talk in acronyms and platforms. Translate tech into outcomes: better care, smoother operations, improved experience. 🔹 Collaborate before you execute Sit with clinical and operational leaders early. Ask what’s hard, what’s working, and what’s holding things back. That’s where trust begins — and real strategy follows. 🔹 Celebrate wins that matter to others It’s not about showing off projects — it’s about tying your work to impact: “This upgrade reduced scheduling friction and improved access.” 🔹 Be visible in non-IT spaces Join patient experience discussions, growth strategy meetings, workforce planning. Don’t wait to be invited. 🔹 Empower your team to lead Your team’s influence matters just as much as yours. Model the mindset you want them to carry. ⸻ Final Thought The CIO role is expanding — and the more we step up as strategic thinkers, collaborators, and communicators, the more value we bring to the entire organization. This post is part of Leading Beyond IT — a weekly (we’ll see how many weeks…)series on strategic technology leadership in healthcare. #HealthcareLeadership #StrategicCIO #DigitalHealth #HealthIT #Transformation #LeadingBeyondIT – Pam Austin, CIO/SVP, Ballad Health

45

2 Comments