Navigation
InfrastructureUpdated July 3, 2026

Disaster Recovery Exercise Standards

drdisaster-recoveryepicinfrastructurefailovervalidationhealthcare

Disaster Recovery Exercise Standards

Standardized DR exercise procedure for OHEMR Epic healthcare infrastructure, ensuring compliance, resilience, and clinical uptime.


๐ŸŽฏ Overview

This DR exercise standard documents the validated and repeatable steps for simulating Epic failover between Azure regions (WUS3 to CUS), validating both infrastructure and application recovery. Execution ensures Epic, HIPAA, and SOX compliance, and prepares teams for real-world disaster scenarios.

Benefits

  • Epic Certification Compliance: Demonstrates Epic-required DR test execution and documentation
  • HIPAA/SOX Readiness: Provides full audit trail and evidence of PHI protection during DR
  • Clinical Uptime: Validates minimal downtime and reliable Epic failover/restore paths
  • Operational Efficiency: Ensures roles, responsibilities, and handoffs are clear

๐Ÿ“‹ DR Exercise Timeline & Task Matrix

Standard DR Exercise Phases

PhasePurposeHealthcare Requirement
Pre-ReqData sync and readinessPHI protection, Epic validation
Failover ODB to CUSApplication failoverClinical continuity, Epic compliance
Failover WSS to CUSCitrix/infra cutoverUser access, downtime minimization
ValidationsService and system checksClinical function, audit evidence
Service RestoreFull service recoveryBusiness continuity, compliance

๐Ÿฅ Epic-Specific DR Patterns

Sample DR Timeline Table (No Unnamed: 0 or Time columns)

TagTaskEstimated DurationTeamResource
Pre-ReqPre-Req: flatfile -Sync directory files between WUS3 and CUS regionsEpic Infra (ODBA)Chris L / Laura /
RedAlert checkdrreadiness
Failover ODB to CUSSend message to users to log out of Epic1UHG CitrixJason / Bharat
Failover ODB to CUSturn BCA Web Edit Mode to On??
Failover ODB to CUSKick users out of WUS3 Epic PRD Instance1UHG CitrixJason / Bharat
ODB Failover to CUS
Failover WSS to CUSPerform Citrix Failover to CUS1Citrix TeamJason / Bharat
Failover ODB to CUSTurn off Epic Interfaces in Epic and RhapsodyInterfaceLinda Wilson (UHG)
Failover ODB to CUSAllow interface messages to process, notify group once queue is at zeroInterfaceLinda Wilson (UHG)
Failover ODB to CUSBring WUS3 to runlevel D, perform ODB Failover20Epic Infra (ODBA)Mason / Laura
Failover ODB to CUSWebblob -ANF cutover5NAS TeamLiviu / Neha
Failover ODB to CUSDNS Cutover - Step 19 in ODB run book - A1 in DNS tab45DNS TeamKen Cox
Failover ODB to CUSPromote CUS ODB as primary, demote WUS3 ODB to secondary20Epic Infra (ODBA)Chris L / Laura
Failover WSS to CUSHSW (Internal) Failover20DNS TeamKen Cox
HSW (External) Failover
DNS Cutover - Bundle #2
Failover WSS to CUSValidate DNS Failover10Epic Infra ECSAMatt/ Jerry Bennet / M
Failover WSS to CUSValidate Internal / External Zones10Epic Infra ECSAMatt/ Jerry Bennet / M
Failover WSS to CUS1. Epic Infra ECSA Web Servers: In KuiperEpic Infra ECSAMatt/ Jerry Bennet / M
- Change WUS3 (PRD) servers "Transitioning out of service"
- Change CUS (DR) servers "In service"
2. Recycle application pools on CUS (DR) servers
Failover WSS to CUSCogito changes to monitor/modify ETLs as neededEpic CogitoAngelea/ Maria / Nick
Pre-Service Restore Validations
ValidationsIntegration Team turn on interfaces in appropriate order15 minutesInterface Team
ValidationsConfirm: interfaces up and messages processing5 minutesInterface Team
ValidationsConfirm: Can login to hyperspace PRD5 minutesECSA
ValidationsConfirm: Can open chart review5 minutesECSA
Service RestoreGC Analyst fileback all transactions in BCA30 minutes??
End Downtime
Service RestoreChange PRD to Access level all5 minutesEpic ODBA
Service RestoreCall service management hotline number1 minuteLeader
Service RestoreLeadership communication #5 sent (final)1 minuteLeader

๐Ÿ”ง Standard DR Validation Requirements

Pre-Exercise Validation

Before starting DR failover, verify:

  1. Epic Requirements: All data and systems are in sync, ready for cutover
  2. Network Security: Citrix, DNS, and NAS changes follow approved playbooks
  3. Communication: All teams notified and ready for handoff/validation per timeline
  4. Documentation: All tasks, owners, and durations tracked for audit

Validation Checks

# Confirm all Epic systems and interfaces are up post-failover
# Example PowerShell validation
$EpicStatus = Get-EpicSystemStatus -Region "CUS"
if ($EpicStatus -ne "Healthy") {
    Write-Error "Epic DR system status NOT healthy. Investigate immediately."
}

# Confirm Citrix access
Test-NetConnection -ComputerName "cus-citrix-gateway" -Port 443

๐Ÿšจ Troubleshooting Guide

Common DR Issues

Problem: Users cannot access Epic after failover

Diagnosis: Citrix or DNS issue

Resolution:

  1. Validate Citrix failover completion and gateway update
  2. Confirm DNS cutover and propagation
  3. Communicate to Service Desk for user notifications

Problem: Interfaces not processing messages

Diagnosis: Interface queue or system not restarted

Resolution:

  1. Check interface team brought up systems in order
  2. Validate interface message queue is zero
  3. Confirm Epic interface status in application

Problem: Performance issues post-failover

Diagnosis: NAS or database not fully cut over

Resolution:

  1. Validate ANF cutover (Webblob)
  2. Check SQL/ODB failover completion
  3. Monitor Epic application logs for errors

๐Ÿ”— Related Documentation


๐Ÿ“ž Support & Contacts

Emergency Contacts


๐Ÿ—๏ธ Deployment Excellence: Standardized Terraform-based VM deployment ensures reliable, compliant healthcare infrastructure supporting Epic clinical systems.