30 days.
The new benchmark.
Already in production.
A one-page brief on the AHA / Joint Commission Cyber Resilience Readiness program and the continuity layer that closes the gap it names.
01. Maintain safe patient care during cyber disruptions.
Full read-write clinical workflow on web and mobile, ready in under a minute. Clinicians document, place orders, verify medications, and manage beds without interruption.
02. Coordinate clinical, operational, and leadership response during downtime.
Runs in parallel with the primary EHR on a separate cloud with separate credentials. Already live when downtime starts. Lateral movement has nowhere to go.
03. Prepare staff to function effectively during a significant cyber incident.
No clinician change of behavior required. Familiar workflows, same data, web and mobile access on IT-cleared devices. Minimal training. Log in and keep working.
04. Identify and mitigate risks that pose a threat to clinical continuity.
CyberVault validates incoming records against ransomware signatures before sync-back to the primary EHR. Closes the contaminated-restore failure mode structurally.
Epic, Oracle Cerner, and MEDITECH have each recommended Spare Tire to customers on the analyst record. EHR-agnostic by design, integrating via standard HL7 APIs with any HL7-capable EHR.
| Organization | Date | Downtime | Disclosed cost | Per-day burn |
|---|---|---|---|---|
| Universal Health Services | 2020 | 3 weeks | $67M loss | ~$3.5M/day |
| CommonSpirit Health | 2022 | 38 days | $160M cost | ~$4.2M/day |
| Change Healthcare | 2024 | Weeks | $2.9B+ ecosystem | 94% of US hospitals |
| Ascension Health | 2024 | ~6 weeks | $1.8B FY24 loss | ~$48M/day |
Sources: SEC filings, FY earnings disclosures, AHA hospital survey March 2024. Per-day burn derived from disclosed cost divided by downtime window.
Annual Spare Tire contract
Community hospital: less than four hours of one day of EHR downtime.
Mid-size health system: less than one hour of one day.
Payback on a single event
Multi-year contract value recovered in the first 48 hours of avoided downtime.
| Dimension | Disaster recovery | Zero-downtime continuity |
|---|---|---|
| Measures | Time to recovery | Whether operations stopped |
| Operating state | Activated when systems fail | Live before systems fail |
| Time to clinical access | Hours to days | Seconds |
| At the bedside | Care paused while IT worked | Care continued |
- 01. Take the free CRR self-assessment. 35–45 minutes. Joint Commission website.
- 02. Book a 30-minute working session with our team. We map your EHR, your last downtime event, and the financial impact of preventing the next one.
- 03. Read the white paper. Thirty Days on the Balance Sheet. Full math, all sources.