Report of the COI into the Cyber Attack on SingHealth 10 Jan 2019
11 IHIS’ INTERNAL FRAMEWORK FOR INCIDENT REPORTING AND RESPONSE ................................................................................................................. 34 11.1 The Healthcare IT Security Incident Response Framework (“SIRF”) .......... 35 The Cluster IT Security Incident Response SOP (“IR-SOP”) ....................... 35 Security incident reporting flow for SingHealth ............................................ 35 Technical incident response – the Security Incident Response Team (“SIRT”), Security Incident Response Manager (“SIRM”) and Computer Emergency Response Team (CERT) ......................................................... 39 12 IT AND IT SECURITY GOVERNANCE FOR SINGHEALTH .................. 40 12.1 Healthcare sector-wide platforms The Healthcare IT Steering Committee and the Cyber Security Council ............................................................................ 41 12.2 Cluster-level platforms for SingHealth .......................................................... 42 IT security-related risk management ............................................................. 43 12.3.1 MOHH Audit and Risk Committee (ARC) and Group Internal Audit (“GIA”) ............................................................................................................ 43 12.3.2 Internal IT security risk assessments ................................................................ 44 IT security audits ............................................................................................ 45 12.4.1 CII audits on the SCM system ........................................................................... 45 12.4.2 Audits for non-CII systems and the FY H-Cloud Pen-Test ........................... 45 Compliance reviews and tracking of progress on action plans from audits .. 46 Followup for IT Security audits .................................................................... 47 Relative roles of MOHH GIA and CSG ........................................................ 47
