Case Study: Banner Health achieves rapid eDiscovery and accelerated incident response with OpenText EnCase solutions

Banner Health transforms information discovery and security with OpenText EnCase solutions

Banner Health, a Phoenix‑based nonprofit healthcare system with nearly 500 facilities and millions of annual patient interactions, tasked its Cyber Incident Management & Forensics team with protecting patient data and meeting rising demands for legal discovery and rapid security response. As cyber threats and litigation increased, Banner found its legacy tools could not deliver the speed or defensibility required for enterprise‑wide data collection and incident management.

Banner implemented OpenText EnCase eDiscovery and EnCase Endpoint Investigator, with support from OpenText Professional Services, to enable forensically sound collection across endpoints, automate legal hold and accelerate triage. The rollout cut eDiscovery collection from three–four weeks to six hours, shortened investigation and incident resolution timelines from 60–90 days to 30 days or less (including a four‑hour HR report and a 1.5‑hour incident working theory), and improved efficiency, productivity and stakeholder confidence.

Banner Health

Sam E. Buhrow

Director of Cyber Incident Management & Forensics