CHPPC Module 16, Section 2: EHR & ADC Downtime Procedures
MODULE 16: OPERATIONS UNDER STRESS & CRISIS MANAGEMENT

Section 2: EHR & ADC Downtime Procedures

In this section, we confront the modern pharmacist’s nightmare scenario: the catastrophic failure of core technology. We will conduct a deep dive into the policies, procedures, and manual workflows that a hospital pharmacy must implement when the Electronic Health Record (EHR) and Automated Dispensing Cabinets (ADCs) go dark. This is the ultimate test of a department’s resilience and a pharmacist’s ability to lead under pressure. You will learn how to revert to the fundamental principles of medication safety in a paper-based world, mastering the communication strategies and manual safety checks required to continue providing care when the digital safety net has vanished.

2.1 The Unthinkable: When the Screens Go Dark

Understanding the profound impact and types of system downtime.

Modern hospital pharmacy is built upon a foundation of interconnected technology. The EHR is our source of truth for orders and patient information. ADCs are our secure, decentralized pharmacies on the units. Smart pumps are our intelligent delivery systems. When these systems fail, the entire medication-use process is thrown into jeopardy. An EHR or ADC downtime is not a minor inconvenience; it is a full-blown patient safety crisis. Without the electronic safety checks, clinical decision support, and clear communication loops we rely on, the potential for catastrophic error increases exponentially. A well-prepared pharmacy department does not hope that downtime never happens; it plans for when it will.

Retail Pharmacist Analogy: The Total System Crash on the First of the Month

Imagine it’s the first of the month. Your pharmacy is packed, the phone is ringing, and suddenly, everything dies. Your pharmacy management system is down. The registers are offline. The internet is out, so you can’t process credit cards or adjudicate claims. The phone lines are dead. You are technologically blind and isolated. Do you close the pharmacy? No. You activate your “downtime procedure.” You have a binder with paper prescription blanks. You have a credit card imprinter for manual transactions. You write down every script you dispense in a manual log. You tell patients you will bill their insurance later. You triage, you communicate, and you rely on your fundamental knowledge and manual processes to get through the crisis. You become the central processing unit of the entire operation.

An EHR downtime is this exact scenario, but the stakes are life and death. The “paper prescription blanks” are your downtime order forms. The “manual log” is your communication binder. And you, the pharmacist, become the absolute nexus of all medication-related information for the entire hospital, relying on your core knowledge and leadership to maintain safety in an analog world.

2.1.1 Planned vs. Unplanned Downtime: A Tale of Two Crises

Not all downtimes are created equal. The nature of the event dictates the level of preparedness and the intensity of the response.

Downtime Type Description Pharmacy Preparedness & Response
Planned Downtime Scheduled in advance for system upgrades or maintenance. Typically occurs overnight or on a weekend to minimize impact. The duration is known. Proactive Response: The pharmacy has days or weeks to prepare. We print out current MARs for every patient in the hospital. We ensure all ADCs are stocked to maximum levels. We pre-print extra labels. We schedule additional staff to be on-site. The response is controlled and orderly.
Unplanned Downtime A sudden, unexpected system crash. It could be a server failure, a network outage, or even a cybersecurity event (ransomware). The cause and duration are unknown. Reactive Crisis: This is a true emergency. There is no pre-printed information. The pharmacy must immediately activate its emergency plan, recall staff, and build a paper-based system from scratch in real-time. This is the ultimate test of your department’s resilience.

2.2 The Downtime Arsenal: Paper Forms and Red Binders

Deconstructing the physical tools that replace your digital workflow.

When the technology fails, we revert to a robust, pre-planned paper-based system. Every nursing unit and the pharmacy itself will have a “Downtime Kit,” often a large, brightly colored binder or box. This kit contains all the physical forms, logs, and resources needed to run the medication-use process manually. As a pharmacist, you must be intimately familiar with the contents of this kit, as it becomes your new operating system.

2.2.1 Anatomy of a Downtime Kit

Let’s dissect the contents of a typical pharmacy downtime kit. This is your arsenal for maintaining order.

Component Description Pharmacist’s Role & Focus
Downtime Order Forms Multi-part, carbon-copy prescription forms. The physician writes an order, the top copy is sent to the pharmacy, and a copy stays on the chart. This is your new source of truth for orders. You must be an expert in scrutinizing these for completeness (drug, dose, route, frequency, patient name, MD signature). Illegible handwriting becomes a major safety risk.
Paper Medication Administration Records (MARs) Blank MAR templates. Nurses will manually transcribe all active medications onto these sheets for each patient and use them to document administration times. You will use these MARs to reconstruct a patient’s medication profile. You must work with nurses to ensure these are accurate and are updated with every new order.
Communication Logs Spiral notebooks or log sheets to manually document every phone call, clarification, and intervention. This is your legal record. You must meticulously document the “who, what, when, where, why” of every conversation, as there will be no electronic record.
Pre-Printed Labels Sheets of blank or pre-formatted labels for IV bags and other dispenses. You will have to manually write or type all label information. The risk of error is high. A second pharmacist check is critical.
Core Drug Information Resources Physical copies of key references: The hospital formulary, IV compatibility charts (Trissel’s), dosing guidelines for high-risk drugs. You lose your electronic references. These physical books (or downloaded offline versions) become your only source for clinical decision support.
Calculators & Forms Basic calculators, conversion charts, and any forms needed for pharmacokinetics or other specialized services. You lose all your integrated calculators. You must revert to performing calculations manually.

2.3 The Pharmacist’s Role During EHR Downtime: A Masterclass

Your leadership in a world without digital safety nets.

During an EHR downtime, the pharmacy transforms from a component of the medication-use system into its central nervous system. Every piece of information must flow through you. Your ability to create manual systems, communicate clearly, and lead your team is paramount. The following is a breakdown of your core responsibilities.

2.3.1 Workflow 1: Order Verification & Profile Reconstruction

The flow of new orders will shift from CPOE to a constant stream of paper forms, phone calls, and runners appearing at the pharmacy window.

  1. Triage: You must immediately triage incoming orders: STAT vs. Routine. STAT orders get immediate attention.
  2. Verification: You must scrutinize the paper order with heightened vigilance. Is it legible? Is it complete? Does it have a valid signature? You must be ruthless in rejecting incomplete or ambiguous orders. Call the provider for clarification and document the call in your log.
  3. Profile Reconstruction: This is the most difficult cognitive task. For every order, you must try to reconstruct the patient’s profile to perform a DUR. Your sources are now analog:
    • The patient’s paper MAR (if available and up-to-date).
    • Asking the nurse or provider: “What other medications is this patient on?”
    • The patient’s physical chart, if it can be located.
  4. Documentation: Once verified, the order is stamped with the date and time. One copy of the form is kept for pharmacy records, and a runner is dispatched to take another copy back to the floor to be added to the patient’s paper chart and MAR.

2.3.2 Workflow 2: Communication Command Center

With the EHR chat and notification systems gone, the pharmacy phone becomes the single most important communication tool in the hospital. You must manage this influx of information with military precision.

  • Designate a “Communicator”: One pharmacist should be assigned the sole role of answering the phone. This prevents other staff from being constantly interrupted.
  • The Communication Log is Sacred: Every single piece of clinically relevant information must be logged. “14:35 – Dr. Smith called for patient John Doe. Clarified Zosyn dose is 3.375g Q8H, not Q6H. – C. Pharmacist.” This log will be essential for back-entry and any post-downtime analysis.
  • Proactive “Broadcasts”: Use runners and frequent calls to the charge nurses to proactively push out information. “This is pharmacy. Just an update, the EHR is still down. We are prioritizing all STAT and first-dose antibiotics. Please continue to send all orders via the downtime forms.”

2.4 ADC Downtime: Unlocking the Meds and the Forensic Aftermath

Managing security and accountability when the electronic gatekeeper fails.

If the EHR is the brain, the network of Automated Dispensing Cabinets (ADCs) is the backbone of medication distribution. When the network connection to the ADCs is lost, they can no longer receive new orders or verify patient information. This requires a shift to a manual override process that is faster for the nurse but carries an immense risk, especially for controlled substances. Your role becomes that of a remote security officer and a post-event forensic accountant.

2.4.1 The Override Process: Balancing Access and Control

Most ADCs have a “critical override” or “downtime” function. This allows a licensed nurse to access medications without a current, verified order in the system. To do this, they typically have to acknowledge a series of warnings and document the reason for the override. During a downtime, this becomes the primary method for retrieving urgent medications.

Your Role: While you cannot control this process from the pharmacy, you are the expert who must guide it. You will be in constant communication with the charge nurses, reminding them of the policy: overrides are for urgent/STAT medications only. Routine medications should be sent from the central pharmacy. You must remind them of the critical importance of documenting every single override on the patient’s paper MAR.

Masterclass on the Post-Downtime Narcotic Reconciliation

This is one of the most stressful and important tasks you will perform as a hospital pharmacist. When the ADC comes back online, it will have a complete electronic record of every single override that occurred. Your job is to reconcile this electronic “withdrawal” record against a paper “administration” record that was created in the chaos of the downtime. This is a forensic audit to ensure no diversion occurred.

  1. Generate the Report: The first step is to run the “Override Report” from the ADC for the downtime period. This report will show every medication removed, the time, and which nurse removed it.
  2. Gather the Evidence: You must then collect all the paper MARs from the nursing units for that same time period.
  3. The Line-by-Line Audit: You will go through the override report, line by line. For every single narcotic withdrawal, you must find a corresponding, documented administration on a patient’s paper MAR, supported by a valid handwritten physician’s order.
  4. Investigate Discrepancies: You will inevitably find discrepancies. The override report shows a nurse pulled 2mg of morphine for Jane Doe, but there is no documentation on the MAR. You must now investigate. This requires calling the nurse and asking for clarification. “Hi Sarah, this is the pharmacist. I’m reconciling the downtime records. I see you pulled 2mg of morphine for Jane Doe at 03:00, but I don’t see it documented on the MAR. Can you clarify what happened?” The nurse may have simply forgotten to document it. They will need to complete a documentation correction. If the nurse has no memory of it, or if the story is inconsistent, this becomes a major red flag that must be escalated to the pharmacy and nursing leadership for a formal diversion investigation.

This painstaking, zero-error tolerance reconciliation is a fundamental legal and safety responsibility of the pharmacy department.

2.5 Recovery and Back-Entry: The Aftermath

The meticulous process of restoring the digital truth.

When the announcement is finally made—”The EHR system is now back online”—the crisis is not over. In many ways, the most tedious and error-prone work is just beginning. The hospital now has two separate and conflicting realities: the paper world that existed during the downtime, and the now-active electronic world which is completely unaware of everything that has happened. The process of reconciling these two worlds is known as “back-entry,” and it is a massive, all-hands-on-deck undertaking that is often supervised by the pharmacy.

2.5.1 The Monumental Task of Back-Entry

Every single medication event that occurred on paper must now be entered into the EHR to create a complete and legal medical record. This includes:

  • Every new physician’s order written on a downtime form.
  • Every medication administration documented on a paper MAR.
  • Every dose dispensed from the central pharmacy or removed from an ADC on override.

Your Role as Supervisor and Verifier: This task is often shared between physicians, nurses, and pharmacists. You will be responsible for overseeing the pharmacy-related back-entry. You must ensure that every paper order you verified is now correctly entered into the CPOE system. You will then need to perform a “post-downtime reconciliation,” comparing the newly entered electronic orders against the paper MARs to ensure nothing was missed. This is effectively a hospital-wide medication reconciliation and can take many hours.

The “Hot Wash”: Learning from the Chaos

After the recovery is complete, the final and most important step is the debrief, often called a “hot wash” or root cause analysis. All leaders involved in the downtime response—including the Pharmacy Unit Leader—will meet to analyze the event.

Key Questions for the Pharmacy Debrief:

  • What went well? Did our downtime kits have everything we needed? Did our communication plan work?
  • What broke down? Where were the bottlenecks? Did we run out of a specific form? Was there a delay in getting runners to the units? Did we have enough staff?
  • What were the biggest safety risks we identified? Was illegible handwriting a major problem? Did we discover a significant number of undocumented ADC overrides?
  • How can we improve our plan? What needs to be added to the downtime kits? Do we need to conduct more staff training and drills on the downtime procedures?

The lessons learned from a real-world downtime event are invaluable. Your honest, constructive feedback is what allows the hospital to refine its emergency plans and be even better prepared for the next time the screens go dark.