Case Study: WellSpan Health achieves 82% EPCS adoption and stronger cybersecurity with Imprivata Confirm ID

Implementing a successful EPCS and multifactor authentication strategy for healthcare

WellSpan Health, a 697‑bed health system in Pennsylvania with six hospitals and 250+ clinics, faced rising cybersecurity and prescribing risks after mock phishing tests showed about 15% of staff clicked a fake link and 4% entered credentials. At the same time, complex DEA requirements and the fraud/diversion risks of paper prescriptions were hindering adoption of electronic prescribing of controlled substances (EPCS).

WellSpan implemented Imprivata Confirm ID for Remote Access and for EPCS — a single, DEA‑compliant platform providing identity proofing, supervised enrollment, two‑factor authentication, and auditing. The rollout enrolled more than 10,000 users for remote access 2FA and 900+ clinicians for EPCS, resulting in 82% of controlled substances being prescribed electronically, tighter security, more efficient clinical workflows, and improved patient safety and satisfaction.

WellSpan Health

Robert Lackey

Associate Chief Medical Information Officer