COI Report – Part II
Page
24 of
425 9.1 The Infrastructure Services Division 9.1.1 Overview 63.
IHiS Delivery Group, and in particular its subgroup
Infrastructure Services, encompass salient functions pertaining to the Inquiry, including the managing of the SCM
system and SingHealth network, and responding and reporting of security incidents.
64. Delivery Group is headed by Director Ong Leong Seng (“
Leong Seng”). Three teams within the Delivery Group are responsible for ensuring the functioning and integrity of the SCM system at different stages a) Product Management and Delivery – Clinical Care (“
PMDCC”); b) Infrastructure Services and c) Service Delivery
65. Descriptions of these three teams, as well as their roles and responsibilities, are set out below.
9.1.2 Product Management and Delivery – Clinical Care 66.
Generally, the PMDCC team is responsible for the Development and Implementation Stages in the provision of IT systems. PMDCC includes the
SingHealth SCM team headed by Programme Director Foong Lai Choo (“
Lai Choo”), which manages the development and implementation of updates, upgrades and changes to the SCM system.
9.1.3 Infrastructure services 67. Infrastructure services is headed by Director Serena Yong (“
Serena”). There are four towers of competencies in the Infrastructure Services team, which each tower responsible
fora separate IT domain COI Report – Part II
Page
25 of
425 (a) End User Computing (“
EUC”) Management, which focuses on the rollout and deployment of endpoint devices such as PCs, laptops, and printers, including software installation, configuration and administration of these devices. EUC’s day-today operations include the physical transportation
of endpoint devices, technical refreshes, troubleshooting, and user support. The majority of
EUC’s operations are outsourced to third parties, and EUC works closely with these third parties to ensure smooth EUC operations. b)
Network Management, which is in charge of network connectivity within the healthcare environment. The team manages the wired and wireless Local Area Network (“
LAN”) that end users connect to, the Wide-Area Network (“
WAN”) that connects the LAN to H-
Cloud data centres, the server LAN within the data centres, and all connections to the internet and private third party networks. The team’s day-to-day operations include continuous
network traffic monitoring, network equipment technical refresh and upgrades, network equipment firmware patches, and network routing and configuration changes to support system rollouts and new facilities. This team is largely in-sourced within IHiS. c) Security Management, which is led by Assistant Director, Infrastructure Services, Han Hann Kwang (“
Hann Kwang”). The Security Management tower comprises three Cluster security teams, that are in charge of security operations and projects, and security awareness and training for their respective clusters. The Security Lead for the SingHealth security team, also called the Security Management Department (“
SMD”), is Tan Choon Kiat Ernest (“
Ernest”), who has reporting lines to Hann Kwang, as well as SingHealth Cluster Infrastructure
Lead Leong Woon Lan (“
Woon Lan”). The security operations activities include the operation and administration of security tools such as firewalls, Virtual Private Networks (“
VPNs”), Intrusion Detection and Prevention Systems (“
IDS/IPS”); security incident investigation
