Cyber Security Measures for National Electronic Health Record System

Ms Joan Pereira asked the Minister for Health with regard to the mandatory National Electronic Health Record (NEHR) system, whether there are standardised nationwide cyber security measures which all healthcare providers have to adopt in order to protect data from being hacked.

Mr Gan Kim Yong: Healthcare providers are required to protect their patient records, including electronic records, and to comply with nationwide cyber-security standards, for the purpose of contributing to and accessing NEHR.

These include installing a secure IT system, using two-factor authentication and regularly updating the anti-virus security software to enhance the protection against cyber-attacks.

MOH will continue to work closely with the Cyber Security Agency and healthcare providers to monitor the cybersecurity threat landscape and put in place additional safeguards when new risks emerge. We will also conduct regular exercises to test the resilience of our systems and maintain a high level of cyber-readiness.