Annual Report 2023-2024

all systems go for Information Services

Cybersecurity Achievements: July 2023 to Present 91 Vendor risk assessments conducted 95% Of inbound messages identified as malicious and blocked 18,863 Additional malicious messages intercepted and neutralized 5,400+ Service requests closed Phishing Campaign Awareness: Since January 2024 Awareness Training » I mplemented new training program to help employees recognize malicious emails » Conducted phishing campaigns with a >95% successful recognition rate by employees, significantly enhancing threat detection capabilities

Shriners Children's Information Services is dedicated to collaborating with the organization as a partner, providing foundations of technology and innovation.

The team is committed to the timely, professional and value-based delivery of these foundational elements as an integral aspect of facilitating Shriners Children’s three fundamental pillars of care, research and education. Electronic health records: Last year, the healthcare system completed phase 1 of the move to Epic, an electronic medical records (EMR) system that enhances the way our sites share and store patient data, medical records and billing. In January 2024, phase 2 launched, with a go-live date of April 5, 2025. IS teams are working closely with operations teams, functional work groups and Epic personnel to support the transition to the new EMR, said Chief Information Officer John McFarland. Read more about the Epic project on page 32. Protecting our data centers: Everything we do as an organization is built on top of the core infrastructure, which lives in a data center. These data centers support all of the information technology systems across the enterprise, so it’s important that the facilities be safe and secure. This past year, the secondary data center, which was in Alpharetta, Georgia, was moved to the West Coast, to increase resiliency for the organization by providing geographic diversity. In addition, preparations are being made to move our East Coast data center to a provide even further resiliency and scalability. Enterprise resource planning platform: In order to bring Epic-level optimization to our non-clinical areas, we have executed selection for a new systemwide enterprise resource planning platform. This platform will support operational functions in human resources, supply chain, and finance. The project will be a multi-year effort and include all Shriners Children’s facilities in the United States, Mexico and Canada.

John McFarland Chief Information Officer

Threat Landscape » Email compromise remains the most

prevalent attack vector

63