ReadySee™

FAQ

What is ReadySee?

ReadySee is a vendor-agnostic, scalable platform that gives you insights into your device inventory, behaviors and risks, and automatic monitoring of your devices and infrastructure. With this solution, you can:

• See devices and traffic on your segregated CARESCAPE™ network
• View whether a device is clinically in use (only available for B-series V2 patient monitors)
• Receive alerts infrastructure and critical traffic flows (i.e., HL7, Vitals)
• Self-manage policies to enable critical medical equipment communication while minimizing risk
• Choose from several API integrations, such as CMMS and Identity Management Systems
• And more

Why is it needed?

Managing biomedical devices is essential to patient care. And time is of the essence. All too often tracking and troubleshooting those devices can be complex and inefficient. This time could be better spent on activities that reduce downtime and facilitate timely patient care. According to a 2022 MedPanel research study, we found that Biomedical and Clinical Engineers are frustrated with not having visibility into their devices and networks. Without this visibility, they are unable to manage risks and behaviors and reduce manual troubleshooting, and downtime was the primary challenge of our target audience. ReadySee directly addresses this challenge through features that allow our customers to:

• Spend time keeping crucial devices ready to go instead of looking for them
• Prioritize and proactively manage your device network while reducing risk
• See more to secure more and help enable seamless care

How and what type of data does ReadySee collect from the hospital network? Does it process or store personally identifiable information (PII) or electronic protected health information (ePHI)?

No PII or ePHI information is captured, stored, or processed. Only necessary metadata that is required for device inventory and profiling is gathered by the Sensor from the network traffic that is traversing the SPAN/RSPAN port configured on the network switch.

Where is data hosted?

Necessary device metadata that is retrieved by the Sensor from the local clinical network is securely forwarded to, and hosted in the SOC2 compliant data center, located in the USA and hosted by Ordr.

What security measures exist for the application backend?

The data center hosting Ordr’s servers is SOC2 compliant. Physical access to the servers is restricted to authorized personnel only. Industry best practices and robust access controls mechanisms are utilized to safeguard physical and logical access to the servers and any other computing resource.

How is it deployed?

The ReadySee deployment is comprised of two parts:
1 – Customer specific analytics engine cluster instance is deployed in the Data Center. 2 – The Sensor(s) are deployed in the customer’s local clinical network segment. Please reference detailed deployment diagram below:
2 – The Sensor(s) are deployed in the customer’s local clinical network segment. Please reference detailed deployment diagram below:

How much data is sent to the cloud? Is it secure? How is data protected in transit?

ReadySee extracts only metadata from the network traffic visible by the Sensor, which typically ranges from a few hundred kbps to a Mbps. The data is sent securely using HTTPS.

Can you describe your encryption key management process?

ReadySee uses certificates for securing its HTTPS connection. These certificates typically have a validity of a year. They will be updated as part of normal maintenance processes before expiration.

How much historical data is stored in cloud?

The amount of historical data maintained in ReadySee is configurable.

How are problems reported and resolved?

ReadySee has a dedicated Customer Success team. Customers can report an incident or raise an enhancement request by filing a ticket or when communicating with a member of customer success team. The tickets will be processed based on the priority of the incident as defined in the Statement of Service Deliverables.

What is the password policy? How is a user identified and authorized for login and access management (offline/remotely)?

ReadySee can be configured to validate user login based on the SSO provider via Active Directory, enabling the organization to control access via their password policy.

Who from GE HealthCare/Ordr can gain access to assets placed in hospital environment remotely and why?

ReadySee personnel will not have access to devices in the hospital environment. If/when configured, the Sensor that is placed in the hospital environment can access the clinical network switch via SNMP/CLI. Similarly, as part of the configuration, the Sensor will be able to query the GE HealthCare CARESCAPE monitors for specific clinical accessory device information.

What would be the connectivity requirements to remotely access sensors?

Access via VPN or using remote shell access (if enabled) is needed to perform updates and patches as needed to the Sensor(s).

Can hospital admin enable/disable remote access feature on a needed basis?

Yes, admin can enable/disable remote shell access to the Sensor(s).

What is the relationship between GE HealthCare & Ordr?

Recognizing the great need for improvement in the healthcare environment, GE HealthCare, a leader in innovative, patient-focused technologies, and Ordr, the leader in connected device security, have collaborated to offer a solution that can address the everyday, real challenges our customers face—like locating devices, monitoring and troubleshooting performance issues, or not having accurate device data to help mitigate vulnerabilities and risks.
Our customers need their medical devices to be ready to go, so care teams can be ready to care for their patients. And time is of the essence. That’s exactly why we’ve launched ReadySee, our easy-to-use network supervision solution. And that’s why we’ve worked with Ordr—to eliminate blind spots for customers and help them prioritize and address vulnerabilities in their devices.
When it comes to managing the volume and complexity of medical devices, we want to make things as easy as we can. With ReadySee, customers will know more about what devices they have, where they are, and what they need to keep them ready to go. That can make a difference to care teams and the patients they serve.

Who is Ordr?

Ordr is the only purpose-built platform to discover and secure every connected asset. From traditional IT to the growth of IoT, IoMT, and OT devices, Ordr aims to give every organization the confidence that they can effectively manage and secure all of the connected devices in their environment. Ordr discovers every connected device on a network, profiles device behaviors, uncovers risks and automates responses. This technology also identifies devices with vulnerabilities, weak ciphers and certificates and any active threats. Ordr can be deployed on-premise or in the cloud and has been effectively implemented at scale to secure connected devices in large, complex networks across all industries.
In collaboration with GE HealthCare, professionals in the healthcare industry can experience the power of this technology through ReadySee.