Integrated Health Information Systems (IHiS), the IT vendor for Singapore’s healthcare sector, is working to roll out a feature that lets patients view the access logs of their own National Electronic Health Record (NEHR) data, Health Minister Gan Kim Yong said yesterday in Parliament.
This will allow patients to report any suspicious access themselves, he said.
The feature is among the enhancements under way to strengthen the security of electronic health records and systems.
Responding to MPs’ questions in the debate on his ministry’s budget, Mr Gan said there are three broad levels of safeguards protecting the NEHR: hardening protection against cyber attacks and unauthorised access; putting in place effective measures to detect and respond to security breaches; and, deterring breaches from happening.
These measures follow last year’s cyber attack on SingHealth that resulted in the theft of 1.5 million patients’ personal particulars.
Mr Gan also said regular security audits are conducted on the NEHR database, with the most recent penetration test carried out last October.
“In addition, there are ongoing robustness tests conducted by the Cyber Security Agency, GovTech and…
