Already a member or subscriber? Sign in now

Ready for Downtime: Preparing for Unexpected Internet and Power Outages

AMY MCCOY, DO
SOFIA MUENYI, MD
REETU GREWAL, MD, FAAFP
MISSY BROOKER, RN

FPM. 2026;33(2):21-26.

Author disclosures: no relevant financial relationships.

This content conforms to AAFP criteria for CME.

Cyberattacks and natural disasters can leave primary care clinics without power or access to key online systems. Here's how to keep operations going.

Downtime refers to when a clinic or health care system's electronic or physical operations are disrupted. Downtime due to planned maintenance is usually brief and easy to plan around. But when it is caused by cyber-attacks that leave clinics without access to internet-connected systems, or natural disasters that damage physical infrastructure, the disruption can be much more severe.1,2

Cyberattacks against health care organizations are on the rise, and anti-viral software with security protection is not capable of blocking every incursion.3 Hospitals and larger health centers may have backup generators to provide power during a weather emergency, but smaller ambulatory clinics usually do not and could be without electricity for hours or even days. Outages can prevent clinic staff from accessing electronic health records (EHR), limiting or preventing communication with patients, other clinicians, and insurance companies. They can make it impossible to retrieve schedules, make referrals, or electronically send prescriptions to the pharmacy.

Proactive preparation for these events can help clinics maintain patient care in a modified way and then restart normal operations as soon as possible after the situation is resolved. This article draws from the University of Florida Health's outpatient family medicine protocols to explain how to create a downtime team, develop downtime procedures, and practice for various scenarios with mock downtime drills.

KEY POINTS

  • A downtime team should include clinicians, IT representatives, nurses/medical assistants, and administrative personnel. One person should be designated the team leader.
  • Downtime protocols should include a set of procedures for going to paper-based scheduling, visit documentation, and billing.
  • Preparing for damage to the clinic's physical structure includes stocking supplies such as flashlights, plastic sheets or garbage bags, and coolers and freezer packs to store temperature-sensitive vaccines, medications, and lab specimens.

DEVELOPING A DOWNTIME TEAM

The first step in preparing for unexpected outages is to assemble a downtime team with expertise in several areas. At a minimum, the team should include clinicians, information technology representatives, nurses/medical assistants, and administrative personnel (e.g., office manager and front-desk staff). One person should be designated the team leader in charge of coordinating response to an emergency and wrapping up the response once systems are restored.

Dr. McCoy is a family physician in Jacksonville, Fla.

Dr. Muenyi is an assistant professor, a registered nurse clinical educator in the University of Florida's Department of Community Health and Family Medicine-Jacksonville.

Dr. Grewal is a professor, a registered nurse clinical educator in the University of Florida's Department of Community Health and Family Medicine-Jacksonville.

Missy Brooker is a registered nurse clinical educator in the University of Florida's Department of Community Health and Family Medicine-Jacksonville.

Author disclosures: no relevant financial relationships.

  1. 1.Olsen E. Change Healthcare data breach officially affects 100 million people. Cybersecurity Dive. October 25, 2024. Accessed Jan. 13, 2026. https://www.cybersecuritydive.com/news/change-healthcare-data-breach-exposure/731009/
  2. 2.Study: Storm-driven blackouts left thousands without care as clinics closed across Southeast. Direct Relief. Aug. 18, 2025. Accessed Feb. 4, 2026. https://www.3blmedia.com/news/study-storm-driven-blackouts-left-thousands-without-care-clinics-closed-across-southeast
  3. 3.Frieden M, Straw I, Kahl N, et al. Cybersecurity preparedness and resiliency in a family medicine clinic. Fam Pract Manag. 2025;32(3):26-30.
  4. 4.Fahrenholz CG, Smith LJ, Tucker K, Warner D. Plan B. A practical approach to downtime planning in medical practices. J AHIMA. 2009;80(11):34-38.
  5. 5.VFC Operations Guide. Centers for Disease Control and Prevention. Updated July 1, 2024. https://www.cdc.gov/vaccines-for-children/media/pdfs/2024/08/vfc-ops-guide_version-4.0_july-2024_low-res-508-rev-2.pdf

Copyright © 2026 by the American Academy of Family Physicians.

This content is owned by the AAFP. A person viewing it online may make one printout of the material and may use that printout only for his or her personal, non-commercial reference. This material may not otherwise be downloaded, copied, printed, stored, transmitted or reproduced in any medium, whether now known or later invented, except as authorized in writing by the AAFP. See permissions for copyright questions and/or permission requests.