aphl informatics messaging services (aims) · the aws cloud. business associate agreements shared...

33
Analysis. Answers. Action. www.aphl.org APHL Informatics Messaging Services (AIMS) Overview | October 2017

Upload: others

Post on 21-May-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

APHL Informatics Messaging Services (AIMS) Overview | October 2017

Page 2: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

A secure, cloud based environment that accelerates the implementation of health messaging by providing shared services to aid in the transport,validation, translation, transformation and routing of electronic data.

APHL Informatics Messaging Services

Page 3: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

FoundationSince 2008, APHL has maintained a message transport hub service that has the ability to receive, hold, and transmit electronic messages sent from one organization to another. The RnR Hub (now named AIMS Platform) service routes electronic messages between the CDC, partner laboratories, and public health agencies.

Page 4: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

50 states

InfluenzaNREVSSNMI VPDLRNAnimal RabiesAMD

Today: A National Resource for Interoperability

Page 5: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Priorities

Speed and Agility

Elasticity

Low Cost of Experimentation

Easily Deployable Solutions

Legal Continuity Security Compliance Technical Support

Page 6: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

2017 Gartner Cloud Computing Magic Quadrant“AWS is the overwhelming market share leader, with more than 10 times the compute capacity in use than the aggregate total of the other fourteen providers.”

Page 7: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Amazon Web Services (AWS)• Migrated to AWS on March 1, 2014

• Located in the AWS East and West US Regions

• Robust Continuity of Operations and Disaster Recovery

• Approved for GovCloud

Page 8: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

AIMS Functional Architecture

Page 9: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

AIMS Functional Architecture

Page 10: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Compliance✓ HIPAA-compliant, HITRUST-certified environment on

the AWS Cloud.

✓ Business Associate Agreements

✓ Shared Responsibility Model

✓ System Security Plan (SSP) in place

✓ Security Assessment (ST&E) and Audit conducted in 2013 and 2016.

✓ FISMA Moderate Compliance ATO granted

✓ AWS is FedRAMP certified

Page 11: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Cybersecurity

Automated continuous configuration and monitoring provides cybersecurity and information assurance capabilities to information technology environments

on AIMS.

Page 12: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Cybersecurity

Page 13: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Cybersecurity: Access• Access via applications and services

• AWS Identity Access Management (IAM)

• Virtual Desktops

• Access via VPN

• Dashboard – Audit Portal

✓ System Access Authorization Request

✓ FIPS 140-2

Page 14: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Storage, Backup, Archiving

Page 15: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Pain Free On-boarding & Tech Support

Page 16: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Our Team

Hospital Health Public Health

Page 17: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

AIMS Advantages1. Open Source architecture2. Centralized processing and message routing3. Real-time monitoring and audit systems4. Reduced message transport complexity5. Reduced data translation and transformation complexity6. Reduced development and support costs7. Flexible capacity infrastructure8. 5 year authentication certificates9. Vocabulary and HL7 Message Support10. Experienced and dedicated tech support11. FISMA Moderate compliant applications12. FedRAMP compliant environment

13.

Once on AIMS, you can exchange data with AIMS trading partners within minutes!

State Data Administrator

Page 18: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Results: True Interoperability

Page 19: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Interoperability of Influenza Messaging

Page 20: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Page 21: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Empowering StatesState and Territorial Exchange of Vital Events (STEVE)

Page 22: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Traction

80M+ 21.5+ 82Records and

CountingDaily Securely

Monitored Log filesAIMS Trading

Partners

Page 23: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

PHLs involved in the Public Health Laboratory Interoperability Project (PHLIP) use the AIMS Platform to transport Electronic Laboratory Surveillance Messages (ELSM) for Influenza to CDC.

The AIMS Platform is used by PHLs to maintain Pandemic Influenza surge capacity to securely exchange Electronic Test Orders and Results (ETOR).

The AIMS Platform supports Meaningful Use secure message transport for Syndromic Surveillance, Immunizations, and Electronic Laboratory Results (ELR).

The Laboratory Response Network (LRN) uses the AIMS Platform to securely transport messages of possible bioterrorism threats.

LRN

Meaningful Use

Pandemic Influenza

PHLIP

Programs Using AIMS

Page 24: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Programs Using AIMS

The Vaccine Preventable Disease (VPD) program uses four Reference Centers to provide specimen testing for labs that either do not currently provide testing for VPD diseases or want the surge capacity provided by Reference Centers. VPD diseases currently consist of: Measles (Rubeola), mumps, rubella, Varicella Zoster Virus (VZV), pertussis, S. pneumoniae, and H. influenzae.

VPD

The Nationally Notifiable Disease Surveillance System (NNDSS) Modernization Initiative (NMI) is an effort to improve the systems and processes used to receive nationally notifiable disease data to provide more comprehensive, timely, and higher quality data than ever before.

Proof of concept between CDC, Wisconsin, CLC bio, Clarity LIMS to test the secure transport and analysis of WGS data on AIMS.

WGS/AMD

NMI

Page 25: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Programs Using AIMS

Rabies Animal ELR securely sent from laboratories across the US to the CDC via AIMS Platform. Interactive web portal hosted on AIMS to allow CDC Rabies Program Area to access data.

The State and Territorial Exchange of Vital Events (STEVE) project is an update to an existing software application that enables electronic data exchange of vital events. Using a new cloud based infrastructure, hosted in conjunction with the Public Health Community Platform on the AIMS Platform, states and territories will have bi-directional core messaging capabilities. The new solution will offer flexibility and the ability to scale quickly, while significantly reducing the technical footprint within each jurisdiction.

Initial Electronic Case Reporting (eICR) Pilot and RCKMS hosting and integration with eICR

Rabies ELR

NAPHSIS - STEVE 2.0

Public Health Community Platform

The Anti-Microbial Resistance Lab Network is a portal that has upload, validation, and download capability.

ARLN

Page 26: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Programs Using AIMS

The Foodborne Illness lab network is hosted and secured on the AIMS Platform.

This network of private laboratories sending data to Public Health Agencies is being used by the largest private laboratory in the country, transmitting 2.5 million messages per month.

A centralized hub for Immunization Information Systems interoperability

EIP Foodnet

Quest Diagnostics

PHIZ

The environment for Food and Drug Administration LaboratoriesAMD FDA

Identifies the informatics capabilities and needs of the public health community. Laboratory professionals can use the results of the self-assessment to gauge informatics capabilities and gaps, prioritize the use of existing resources, and to document and communicate informatics priorities to policy makers.

SA Tool:

Page 27: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Electronic Case Reporting

Page 28: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Private Sector Adoption

12 States receiving ELR via AIMS

Page 29: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

AIMSPlatform.com

Page 30: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

AIMSPlatform.com

Page 31: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Living in the Future

Integration as a ServiceOutsource the jurisdictions

Data Integration layer and teamto AIMS

Billing Engine“Tagging” AIMS services for

automated billing and Accounting.

Will support Fee for Service.

AIMS Web PortalETOR

Business IntelligenceAnalytics

Branding Refresh Continued Public-Private Collaboration

AIMS Marketplace

Page 32: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Living in the Future

Customer SupportPortal

Software DevelopmentKit (SDK)

Intelligent Message Processing (IMP)

AIMS University

CaseReporting

Page 33: APHL Informatics Messaging Services (AIMS) · the AWS Cloud. Business Associate Agreements Shared Responsibility Model System Security Plan (SSP) in place ... states and territories

Analysis. Answers. Action. www.aphl.org

Contact Information

PATINA ZARCONE-GAGNE,MPH | Director,InformaticsAssociationofPublicHealthLaboratories | Analysis.Answers.Action.P +1240.485.2788 | [email protected] +1978.559.1462