Sooner or later, every facility loses its electronic systems. It might be a ransomware attack, an internet outage, a power problem, a vendor failure or a botched update. The question is not whether it will happen but whether your staff will know what to do when it does. Downtime procedures are the bridge between the moment the EMR becomes unavailable and the moment it comes back, and they are one of the clearest ways IT planning protects residents.
CMS emergency preparedness requirements for long-term care facilities call for an all-hazards approach, including policies for maintaining continuity of operations and a system of medical documentation that preserves resident information and protects confidentiality. The HIPAA Security Rule also requires a contingency plan, including emergency mode operation, so that critical processes can continue while ePHI systems are unavailable. A cyber event or system outage fits squarely within both.
Start with what cannot wait. Ask nursing leadership to identify the information staff need during an outage:
Current medication administration records, including scheduled, PRN and controlled substances.
Allergies, diagnoses and code status.
Care plans and any special precautions, such as fall risk, diet orders or isolation status.
Physician orders and treatment schedules.
Emergency contacts and responsible party information.
Current census and room assignments.
If these are available only inside the EMR, you have identified your gap.
Make a kit that is ready before the outage:
Printed downtime forms: blank medication administration records, treatment records, vital sign flow sheets, progress notes, incident reports, admission and discharge forms, and shift reports.
Regularly printed reports: many EMR systems can generate downtime reports of current orders and medication schedules. Set a schedule for printing or exporting them, daily for high-acuity units, and store them securely, because they contain PHI. Check whether your platform offers an offline or read-only access option for recent records.
A printed contact list: IT provider, EMR vendor, pharmacy, medical director and physicians, department heads, utilities and insurers.
Supplies: pens, clipboards, labels, printer paper, flashlights, and a working non-network phone or cell phones.
Instructions: one-page steps for starting downtime, documenting on paper and reconciling afterward.
Store kits at each nursing unit and in the administrator's office, and verify them quarterly so they do not run out of forms or hold outdated versions.
Decide in advance who has the authority to declare downtime. A typical structure includes an incident lead, often the administrator, a clinical lead such as the DON or charge nurse who directs care continuity, and a technical lead from IT. Set criteria, such as the system being unavailable beyond a certain number of minutes, and spell out how staff will be notified, whether by overhead page, phone tree or runner, since email may not work.
Announce the downtime clearly and start paper documentation immediately.
Record the start time on every form so entries can be reconciled later.
Continue medication passes using printed records, with extra verification for high-risk drugs.
Keep a log of any decisions, workarounds and issues.
Provide regular updates to staff, residents and families as appropriate, without speculation.
Protect the paper: keep it secured and do not leave PHI unattended.
When systems return, resist the urge to declare victory and move on. Backloading paper entries is its own risk.
Confirm with IT that the system is safe and stable before staff resume use.
Enter paper documentation into the EMR in order, with clear notation that entries were made from downtime records and the original times.
Verify medication administration entries with nursing leadership to avoid duplicates or gaps.
Scan or retain the paper forms as part of the record, according to policy.
Hold a debrief within a week: what worked, what did not, what to change.
Tabletop exercises and short drills uncover problems that planning does not. Try a one-unit, one-hour drill with paper forms during a quiet period, with the clinical team's agreement. Include a scenario where the phone system and internet are also affected.
UnityCare IT works with administrators and nursing leaders to build downtime kits, schedule EMR report exports, plan network and power resilience and walk through outage scenarios. If your downtime forms have not been checked in a year, that is a good place to begin.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: 2524 N Broadway Ste 554 PMB 947974, Edmond, Oklahoma 73034