Step-by-step scheduling disaster recovery: from Epic outage declaration through downtime operations,
restore confirmation, and post-restore reconciliation. RPO: 4 hours. RTO: 2 hours.
Annual DR drill required to validate timings and train new staff.
Epic Downtime Declared
IT operations confirms Epic unavailable. Scheduling supervisors and clinic leads notified via phone tree.
Activate Downtime Schedule Printout
Use 7:00 AM or noon printout (whichever is more recent). Covers next 8 hours of scheduled appointments per clinic.
Downtime Operations Active
Schedulers work from paper. New patient requests logged on paper callback log: name, DOB, phone, visit type requested.
Urgent Appointments Triaged
Clinic lead makes real-time decisions. Urgent patients directed to walk-in or urgent care. No Epic entry during downtime.
Epic Restore Signal Received?
IT operations confirms Epic accessible. Test scheduling before notifying all staff.
Restored
Epic Restore Confirmed
Cadence analyst test-books a dummy appointment in TST to confirm scheduling rules active. Notify scheduling supervisors.
Extended Downtime
Extended Downtime Protocol
Generate second downtime printout. Escalate to IT leadership. Patient callback list actively managed. Volume overflow plan activated.
Post-Restore: Enter Missed Appointments
Data entry team enters paper callback log into Cadence within 4 hours. MPI duplicate detection run before committing entries.
Bridges Interface Restart
Verify all SIU and REF interfaces reconnected. Replay messages from Bridges error queue (up to 4 hours of backlog).
WQ and Template Reconciliation
Compare WQ counts to pre-downtime snapshot. Verify provider templates intact for next 14 scheduling days. Flag gaps to clinic admins.
Stakeholder Notification
ServiceNow incident updated with restore time and reconciliation summary. Scheduling supervisors confirm normal operations before P1 closed.
Normal Operations Restored
All appointments reconciled. Interfaces green. P1 incident closed. DR drill findings documented if applicable.