Report of the COI into the Cyber Attack on SingHealth 10 Jan 2019
COI Report – Part II Page 8 of 425 Part II – Background information relevant to the Inquiry TABLE OF CONTENTS – PART II 5 INTRODUCTION TO THIS PART. 10 6 ROLES OF MOH, MOHH, SINGHEALTH AND IHIS IN IT ADMINISTRATION FOR THE PUBLIC HEALTHCARE SECTOR ............... 10 6.1 The Ministry of Health (MOH) – Healthcare sector regulator ...................... 10 6.2 MOH Holdings (MOHH) – Operating arm of MOH, in charge of infrastructure for public healthcare ................................................................ 11 6.3 SingHealth – Healthcare Cluster and legal owner of SCM system ............... 13 6.4 IHiS – Healthcare Sector Lead and central IT agency for the public healthcare system ........................................................................................... 13 6.4.1 Consolidation of public healthcare system’s IT function under IHiS ............... 14 6.4.2 Scope and scale of IHiS’ IT operations ............................................................ 16 7 THE SUNRISE CLINICAL MANAGER SYSTEM ...................................... 17 7.1 Overview of the SCM system ........................................................................ 17 The SingHealth SCM database ...................................................................... 17 User access to SCM and the SCM database .................................................. 18 8 PARTS OF THE SCM SYSTEM AND NETWORK RELEVANT TO THE CYBER ATTACK ...................................................................................................... 20 8.1 Overview ........................................................................................................ 20 8.2 SCM application and database servers .......................................................... 21 8.3 Citrix servers .................................................................................................. 21 Migration of the SCM to H-Cloud and open network connection between SGH and HDC ............................................................................................... 21
