Table of contents exchange of letters with the minister executive summary

Download 5.91 Mb.

View original pdf

Page	22/329
Date	27.11.2023
Size	5.91 Mb.
	#62728

1 ... 18 19 20 21 22 23 24 25 ... 329

Report of the COI into the Cyber Attack on SingHealth 10 Jan 2019

COI Report – Part II
Page 10 of 425

5 INTRODUCTION TO THIS PART
21. The sections in this Part contain background information on various organisational and technical matters – including structures, policies, roles and responsibilities, practices, and systems – that are relevant to the Cyber Attack and the Committee’s findings and recommendations. Unless otherwise mentioned, the information in this Part was correct and in effect at the time of the Cyber Attack.
6 ROLES OF MOH, MOHH, SINGHEALTH AND IHIS IN IT
ADMINISTRATION FOR THE PUBLIC HEALTHCARE
SECTOR
22. This section elaborates on the relationship between the parties who own, manage, and/or have oversight over the SingHealth IT network and the Sunrise Clinical Manager (“SCM”) System, which were key systems compromised in the Cyber Attack.
6.1
The Ministry of Health (MOH) – Healthcare sector regulator
23.
MOH oversees the public healthcare system in Singapore, where IT plays an important role for patient care and services, and is also key to enabling longer- term healthcare sustainability. To support this work, MOH has a Chief Information Officer (“MOH CIO”) and a Chief Information Security Officer
(“MOH CISO”): a) The MOH CIO is responsible for national healthcare plans such as the National Electronic Health Records (“NEHR”) as well as systems in MOH Headquarters. The MOH CIO is Bruce Liang
(“Bruce”), who is concurrently the Chief Executive Officer
(“CEO”) of IHiS. b) The MOH CISO was anew position created in January 2015. The
MOH CISO’s role is to make sure all Information and

COI Report – Part II
Page 11 of 425

Communications Technology (“ICT”) security measures for MOH and its related agencies are implemented according to Government Instruction Manual 8 (“IM 8”). The MOH CISO is Chua Kim
Chuan (“Kim Chuan”), who is concurrently the Director of Cyber Security Governance (“CSG”) in IHiS. Kim Chuan reports to Bruce in both MOH and IHiS capacities.

Download 5.91 Mb.

Share with your friends:

1 ... 18 19 20 21 22 23 24 25 ... 329