

"In healthcare, minutes matter. By modernizing our identity recovery approach and adopting Rubrik, we shifted from slow, manual processes to fast, automated recovery, enabling us to restore Active Directory in hours. That resilience allows us to stay focused on what matters most: our patients."
Thomas McQuaillan
Chief Technology Officer, INTEGRIS Health
Share
Healthcare continues to face an increasingly complex cyberthreat landscape, with over 259 million Americans affected by healthcare-related data breaches in 2024, according to the American Hospital Association. As one of Oklahoma’s largest healthcare systems, INTEGRIS Health’s mission requires maintaining constant operational readiness to support uninterrupted patient care. INTEGRIS Health recognized an opportunity to modernize its identity recovery strategy, streamline response processes, and strengthen resilience across its hybrid environment. Ensuring rapid recovery of core identity services, especially Active Directory, was essential for maintaining continuity of clinical and business operations.
Strategic modernization areas included:
Evolving recovery processes from manual workflows to automated, zero-trust-aligned approaches
Enhancing identity recovery capabilities to support the swift restoration of AD across hybrid environments
Creating unified operational alignment between IT and security for faster, more coordinated response
Under the leadership of CTO Thomas McQuillan, INTEGRIS Health executed a full-scale transformation. He consolidated all IT operations in-house, clarified ownership across teams, and adopted Rubrik's modern, cloud-based platform built on zero trust architecture, resulting in:
From 19 days to 3 days, minimizing operational disruption to critical patient care services
From 11 days down to 3 hours, enabling swift, complete recovery of the core identity system
Which demonstrated a strong, compliant security posture to the INTEGRIS Health board and regulators
INTEGRIS Health undertook a proactive transformation to align its identity recovery strategy with modern security and operational best practices. Consolidating tools, simplifying processes, and reducing administrative complexity created stronger alignment between IT and security teams, driving faster response and improved operational clarity.
A key component of this transformation was accelerating the recovery of the organization’s core identity system. By standardizing on Rubrik Identity Recovery, INTEGRIS Health implemented a modern, automated, and highly predictable method for restoring Active Directory across hybrid environments.
This resulted in:
Streamlined validation of clean, recoverable identity data
Coordinated restoration of users, groups, and policies
High-confidence continuity for business and clinical operations
The improvements also strengthened the system’s overall resilience posture. Rubrik Cloud Vault helped INTEGRIS Health meet strict air-gapped storage requirements, while Rubrik’s integration with the broader security stack supported faster incident response. These combined capabilities led to measurable operational savings as well as an exceptional audit performance, achieved with zero required remediation.
INTEGRIS Health selected Rubrik as the foundation for its cyber resilience strategy, ensuring rapid, reliable recovery across hybrid data environments—including EHR systems, cloud workloads, connected medical devices, and core identity services.
By adopting Rubrik Identity Recovery, INTEGRIS Health saw a 99% acceleration in AD recovery, decreasing restoration time from 11 days to 3 hours. This modernization enabled fast, predictable identity restoration, automated validation of clean recovery points, and consistent replication of critical identity structures across environments.
Supporting these improvements was Rubrik’s zero-trust-based architecture, which provides immutable data protection, integrated threat detection, and rapid recovery capabilities that align closely with the operational needs of modern healthcare.
The ability to restore Active Directory in hours instead of weeks preserves continuity of care, ensuring critical clinical systems remain available during emergencies.
Thomas McQuaillan
Chief Technology OfficerINTEGRIS Health