Harborview approves $48 million resilience plan after mock systems outage

Harborview Regional Hospital has approved a $48 million resilience program after a fictional March systems outage disrupted digital appointment scheduling for 19 hours but did not force the emergency room to close.

The case is an internal mock verification story, but the board packet and related filings outline a familiar hospital problem: how to keep core services running when key digital systems fail. In this scenario, urgent procedures continued under downtime protocols while 312 non-urgent appointments were rescheduled.

The board framed the package as operational continuity work rather than routine IT replacement. The plan covers backup power, medication-ordering redundancy, network segmentation, staff training, and a public patient-notification portal.

What the outage changed

The fictional regulator note says the March outage interrupted digital scheduling for 19 hours, but did not require the emergency department to shut down. That distinction matters because it shows the disruption was serious enough to affect outpatient operations without escalating into a full-site closure.

Harborview said urgent procedures kept moving under downtime protocols, the manual operating procedures hospitals use when digital systems are unavailable. The hospital also said 312 non-urgent appointments were rescheduled during the disruption.

The mock materials describe the outage as a systems resilience failure rather than a confirmed cyberattack. That framing puts the focus on continuity planning, system redundancy and operational response rather than on intrusion response.

How the $48 million plan is funded

According to the mock board packet, the program would be financed with $21 million from cash reserves, $17 million from a municipal resilience grant and $10 million in vendor credits.

That funding mix matters because the city money brings public oversight. The fictional city budget office says the grant requires quarterly public reporting and includes clawback clauses if milestones are missed.

The board packet presents the project as a hospital-wide resilience buildout, not a single-system patch. It is meant to reduce the chance that one technology failure can spill into appointment scheduling, medication workflows or patient communication.

What gets fixed first

The hospital’s timeline puts pharmacy-system redundancy first, followed by scheduling, imaging and patient messaging systems. That order suggests leaders are prioritizing areas that touch medication safety and patient flow before moving to broader communications.

The package also includes backup power and network segmentation, which are meant to reduce the chance that a single point of failure can knock out multiple clinical functions at once. Staff training is part of the same package, reflecting the need to keep work moving when digital tools are unavailable.

A public patient-notification portal is also included. The mock plan treats communication as part of resilience, not just an afterthought once systems are restored.

Oversight and accountability

A third-party audit of backup clinical systems is due within 90 days. The hospital has not identified the vendor that would perform the review.

The fictional regulator has not announced enforcement action. Instead, it says it will review the audit once it is filed and then decide whether further corrective steps are needed.

That leaves the hospital with a near-term reporting calendar rather than an open-ended promise. The grant milestones, the audit deadline and the regulator’s review all create points where the plan could be measured against actual progress.

Stakeholder reaction

The Harborview Nurses Association supports the redundancy work, but says staff will need paid training time and clearer staffing plans during future technology outages. The union’s point is practical: resilience systems only help if workers are prepared to use them under pressure.

Patients First Mock City, the fictional advocacy group, says the portal should include plain-language notices, translated updates and a direct hotline for appointment changes. Its request highlights a separate issue from the technical fix: whether patients can understand what is happening quickly enough to act on it.

The two responses point to the same underlying challenge from different directions. One focuses on workforce readiness, the other on patient communication, but both argue that recovery plans have to work in real operations, not just in board presentations.

What happens next

The first milestone in the hospital’s timeline is pharmacy redundancy, which is supposed to come before the next quarterly public report. After that, the plan moves through scheduling, imaging and patient messaging improvements.

The independent audit due within 90 days will be the next major checkpoint. The regulator says it will review that audit before deciding whether additional corrective steps are needed, and the city budget office will monitor whether grant milestones are met.

For now, the mock case leaves a clear framework: a large resilience program, public funding conditions, a regulator awaiting an audit, and stakeholders pressing for more operational detail on training and patient communications.