How Single Sign-On Is Changing Healthcare: SSO Vendor Comparison

Ponemon Institute© Research Report

Sponsored by Imprivata Independently conducted by Ponemon Institute LLC Publication Date: June 2011

Ponemon Institute© Research Report Page 1

How Single Sign-On Is Changing Healthcare: SSO Vendor Comparison

Ponemon Institute, June 2011 Introduction Ponemon Institute is pleased to present a comparative analysis of Imprivata OneSign® Single Sign-On (SSO) with other companies that offer SSO technology. The analysis is based on a research study sponsored by Imprivata to determine what IT practitioners think about the influence SSO is having on the healthcare industry. Single sign-on automates the login process, enabling clinicians and IT practitioners to login only once to their desktop in order to gain faster access to applications – removing clicks, keystrokes and complex passwords. In light of the rigorous data security requirements in the healthcare industry, SSO and authentication management are almost always deployed together. The combination is growing in popularity because, as shown by our research, it increases employee productivity, reduces helpdesk calls, and strengthens security. We surveyed a total of 404 individuals who work for healthcare organizations and who use SSO technology. They work in private and public hospitals or integrated delivery healthcare systems. Most of the respondents work in IT functions such as operations, data security, IT compliance, quality assurance, network management, helpdesk operations and other key MIS functions. Of the 404 participants in the study, 65 are customers of Imprivata OneSign.

Bar Chart 1: Frequency of competitor SSOs used in healthcare organizations

Bar Chart 1 shows the frequency of seven SSO products or brands that are known to compete with Imprivata’s OneSign. Twenty-nine companies represent the “other” category, which is composed of nominal companies in the SSO marketplace. Comparison of OneSign to other SSO providers We compare OneSign to an aggregate sample of its competitors based on IT practitioners’ responses to survey questions about clinician satisfaction, efficiency, economic impact and security. Most of our findings compare respondents who use OneSign versus those who use another single sign-on (competitor) solution. This cluster of competitors includes seven leading SSO providers as shown in Bar Chart 1 above.

5%

5%

6%

7%

12%

14%

15%

16%

19%

0% 2% 4% 6% 8% 10% 12% 14% 16% 18% 20%

Novell SecureLogin

Passlogix v-Go Single Sign-on

CA Technologies

All others combined

Carefx Fusionfx

HealthCast eXactACCESS

IBM Tivoli Access Manager Encentuate

Imprivata OneSign

Microsoft Sentillion Vergence

Ponemon Institute© Research Report Page 2

Clinician satisfaction Bar Chart 2: Is your SSO solution important to increasing clinician satisfaction?

According to Bar Chart 2, 85 percent of OneSign users believe SSO increases clinician satisfaction within their healthcare organization. In comparison, 73 percent of respondents using other SSO solutions believe this to be true. Survey respondents were asked to rank the order of six “most likely” reasons for deploying SSO in their healthcare organization. While not shown in a graphical presentation, OneSign users rank clinician satisfaction as the number one reason for using this solution. In contrast, improved security is the number one reason for using competitors’ solutions. Efficiency Bar Chart 3: Does your SSO solution simplify access to applications and data?

In our survey we defined efficiency as the total time and related cost savings experienced through the use of SSO versus other authentication methods or not using SSO at all. Bar Chart 3 shows 92 percent of OneSign users versus 81 percent of competitor solution users believe SSO simplifies access to applications and data within their healthcare organization.

85%

3% 11%

73%

15% 12%

0% 10% 20% 30% 40% 50% 60% 70% 80% 90%

Yes No Unsure

OneSign Competitors

92%

8% 0%

81%

15% 4%

0% 10% 20% 30% 40% 50% 60% 70% 80% 90%

100%

Yes No Unsure

OneSign Competitors

Ponemon Institute© Research Report Page 3

Bar Chart 4: Why do you believe single sign-on improves efficiency?

Bar Chart 4 shows a majority of both OneSign and other SSO users say they have either directly observed productivity improvement (35 vs. 30 percent) or personally experienced efficiency gains as a single sign-on user in the workplace (21 vs. 23 percent). Bar Chart 5: Does single sign-on improve healthcare operations? Significant improvement and some improvement combined

Clinical, IT operations and administration all realize improvements in efficiency. According to Bar Chart 5, 88 percent of OneSign users, versus 69 percent of other SSO users, state single sign-on improves the efficiency of clinical operations. Seventy-five percent of OneSign users versus 61 percent of other SSO users state single sign-one improves the efficiency of IT operations. Finally, 73 percent of OneSign users versus 67 percent of other SSO users believe single sign-on improves to the efficiency of administrative activities. Seventy-one percent of OneSign users versus 61 percent of other SSO users believe SSO facilitates clinician adoption of electronic medical record (EMR) applications. Further, 82 percent of OneSign users versus 63 percent of other SSO users believe single sign-on reduces physician access times to EMR applications.

5%

7%

21%

25%

35%

9%

5%

23%

26%

30%

0% 5% 10% 15% 20% 25% 30% 35% 40%

Informal belief or gut feel

Measured productivity improvements

Experienced improvements as a user

Word-of-mouth or comments from clinicians or other users

Directly observed improvements

Competitors OneSign

71%

73%

75%

82%

88%

61%

67%

61%

63%

69%

0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%

Improves physician adoption of EMR applications

Improves the efficiency of administrative activities

Improves the efficiency of IT operations

Improves physician access times to EMR applications

Improves the efficiency of clinical operations

Competitors OneSign

Ponemon Institute© Research Report Page 4

Bar Chart 6: How much time does single sign-on save clinicians and IT practitioners? Extrapolated values in minutes per day

As shown in Bar Chart 6, the extrapolated average time saving for clinicians who use OneSign is 14.6 minutes per day, versus 8.1 minutes per day for users of other SSO solutions. Similarly, the time saving for IT practitioners who use OneSign is 14.8 minutes per day, versus 9.3 minutes for the cluster of other competitor’s products. Hence, OneSign appears to lead to greater time saving than the cluster of other SSO providers. Economic benefits of single sign-on Bar Chart 7: Do you believe that the single sign-on solution supports your organization’s effort to demonstrate the meaningful use of electronic medical records?

Bar Chart 7 shows 61 percent of OneSign users versus 59 percent of other SSO users believe single sign-on solutions support their organization’s effort to demonstrate the “meaningful use” of EMR and related information systems.1

1 The Health Information Technology for Economic and Clinical Health (HITECH) Act (enacted as part of the American Recovery and Reinvestment Act of 2009) defines what healthcare providers need to show in order to qualify for Medicare and Medicaid electronic medical record (EMR) incentives for the meaningful use of certified EMR technology. By putting into action and meaningfully using EMR systems, healthcare providers receive financial incentives.

14.6 14.8

8.1 9.3

- 2.0 4.0 6.0 8.0

10.0 12.0 14.0 16.0

Clinicians IT practitioners

Tim

e in

min

utes

OneSign Competitors

61%

22% 16%

59%

25%

16%

0%

10%

20%

30%

40%

50%

60%

70%

Yes No Unsure

OneSign Competitors

Ponemon Institute© Research Report Page 5

We asked both OneSign and other SSO users to estimate the cost savings associated with SSO deployment in their organizations. Table 1 reports our extrapolation method for determining these cost savings. As can be seen, we estimate an average annual cost savings per clinician of $4,102 for OneSign and $2,278 for other competitors’ solutions used in healthcare.2 Table 1: Assumptions for clinicians Calculus OneSign Competitors Average time saving for clinical staff every day in minutes A = Survey 14.6 8.1 Average number of clinicians using single sign-on B = Survey 786 763 Time savings for all clinicians per day in minutes C = (A x B) 11,461 6,180 Extrapolated time savings for all clinicians per day in hours D = (C / 60) 191 103

Cost of average clinical staff member per year E = Estimate $135,000 $135,000

Cost of average clinical staff member per day F = (E / 250 days) 540 540

Cost of average clinical staff member per hour G = (F / 8 hrs) 67.5 67.5 Cost savings for clinicians each day H =(G x D) $12,894 $6,953

Cost savings for clinicians each year I = (H x 250 days) $3,223,482 $1,738,231 Cost savings per clinician each year J = (I / B) $4,102 $2,278

Bar Chart 8: Perceptions about SSO and its impact on healthcare organizations Strongly agree and agree response combined

Bar Chart 8 reports 75 percent of OneSign users and 54 percent of other SSO users believe single sign-on improves the security of information, applications and IT infrastructure within their organization. Sixty-nine percent of OneSign users and 61 percent of other SSO users believe single sign-on improves their organization’s ability to comply with difficult data protection and privacy requirements such as those espoused under HIPAA.

2The extrapolated savings shown in this analysis are based on the assumption that clinician efficiency improvements reduce headcount. Alternatively, we could assume that the efficiency gain actually generates more time with patients, thus increasing hospital revenues.

45%

69%

70%

75%

75%

38%

61%

53%

55%

54%

0% 10% 20% 30% 40% 50% 60% 70% 80%

Efficiency improvements realized from single sign-on translate into tangible cost savings

Single sign-on improves my organization’s ability to comply with data protection and privacy

requirements such as HIPAA

Single sign-on improves the efficiency of administrative and IT operations in my

organization

Single sign-on improves the efficiency of clinical operations in my organization

Single sign-on improves the security of information, applications and IT infrastructure in

my organization

Competitors OneSign

Ponemon Institute© Research Report Page 6

Caveats Ponemon Institute independently conducted all phases of this project including the survey design, survey administration and the analysis of OneSIgn and other SSO users (two separate samples). Despite careful sampling, data collection and analysis procedures, there is always a possibility that the two samples of respondents were not representative of the underlying population of SSO users in the healthcare environment. There is also the possibility that survey questions did not fully capture each respondent’s candid opinions about the SSO products that are presently deployed by organizations.

Ponemon Institute

Advancing Responsible Information Management Ponemon Institute is dedicated to independent research and education that advances responsible information and privacy management practices within business and government. Our mission is to conduct high quality, empirical studies on critical issues affecting the management and security of sensitive information about people and organizations. As a member of the Council of American Survey Research Organizations (CASRO), we uphold strict data confidentiality, privacy and ethical research standards. We do not collect any personally identifiable information from individuals (or company identifiable information in our business research). Furthermore, we have strict quality standards to ensure that subjects are not asked extraneous, irrelevant or improper questions.