Table of contents exchange of letters with the minister executive summary



Download 5.91 Mb.
View original pdf
Page24/329
Date27.11.2023
Size5.91 Mb.
#62728
1   ...   20   21   22   23   24   25   26   27   ...   329
Report of the COI into the Cyber Attack on SingHealth 10 Jan 2019




COI Report – Part II
Page 13 of 425

6.3
SingHealth – Healthcare Cluster and legal owner of SCM system
30.
SingHealth is the largest of the three healthcare Clusters in the public healthcare sector. SingHealth comprises Singapore General Hospital (“SGH”),
Changi General Hospital (“CGH”), Sengkang General Hospital, KK Women’s and Children’s Hospital, National Cancer Centre (“NCC”), National Dental Centre Singapore, National Heart Centre Singapore, National Neuroscience Institute, Singapore National Eye Centre, SingHealth Community Hospitals and
SingHealth Polyclinics.
31. Since 2012, Group Chief Executive Officer (“GCEO”) of SingHealth has been Prof. Lim Swee Lian Ivy (“Prof. Ivy”).
32.
SingHealth is the legal owner of the SCM system. As the SCM system is also a Critical Information Infrastructure (“CII”), SingHealth is the CII Owner
(“CIIO”).
33. The SCM system provides real-time patient data to physicians, nurses, and other clinicians to facilitate delivery of medical services.
6.4
IHiS – Healthcare Sector Lead and central IT agency for the
public healthcare system
34.
IHiS is the central IT agency for the public healthcare system, and serves all the IT needs of the public healthcare Clusters, including SingHealth. IHiS is accountable to MOH for matters such as IT policy, governance, planning, and implementing IT projects and serving the IT needs of the Clusters.

6
The other two Clusters are the National Healthcare Group (“NHG”) and the National University Health System (“NUHS”).



COI Report – Part II
Page 14 of 425

6.4.1
Consolidation of public healthcare system’s IT function under IHiS
35.
IHiS was formed as a subsidiary of MOHH in July 2008. Prior to the formation of IHiS, the various Clusters managed their IT systems separately – different healthcare Clusters had their own IT departments and the Clusters would be responsible for their own IT security. In 2008, Cluster IT resources and capabilities (including Cluster IT staff) were consolidated under IHiS to better align public healthcare IT, promote interoperability between systems, and give Clusters access to additional IT expertise that they would not have with standalone IT units.
36. There was a further consolidation of IT resources in November 2016, when MOH decided to merge the MOHH ISD into IHiS. With this merger, national healthcare systems which were originally managed by MOHH ISD came under IHiS’ management as well. This merger reduced uncertainty in accountability and mandate between MOHH ISD and IHiS’ teams, avoided misalignment between policy and implementation, and reduced transaction and coordination costs. As a result of the merger, MOHH no longer has any IT staff.
37. Following the above-mentioned merger a)
IHiS became the central IT agency for the public healthcare system. It was accountable to MOH for matters such as IT policy, governance, planning, and implementing IT projects and serving the IT needs of the Clusters b)
MOH appointed Bruce as CEO of IHiS, in addition to holding his concurrent appointment as MOH CIO; c)
MOHH ISSD was restructured to become anew Cyber Security Governance (“CSG”) division in IHiS. Kim Chuan, then-Director of MOHH Identity & Security Services Department (“ISSD”; a department within MOHH ISD), became Director of CSG. Kim



Download 5.91 Mb.

Share with your friends:
1   ...   20   21   22   23   24   25   26   27   ...   329




The database is protected by copyright ©ininet.org 2024
send message

    Main page