HEALTH PROVIDERS WILL BE SUPPORTED THROUGH CYBERSECURITY TRANSITION

We thank Mr Ching Chao Chyun for his feedback (Clear cybersecurity baseline needed in healthcare sector, Feb 9) on cybersecurity standards for healthcare providers in implementing the Health Information Act (HIA). The Ministry of Health (MOH) agrees that clear and implementable cybersecurity and data security standards are necessary for healthcare providers and their IT vendors.  

MOH has been actively consulting healthcare providers and the industry over the past few months and will be issuing the revised Cyber Security and Data Security Essentials for healthcare providers by the end of February 2026. The Essentials set out essential security controls, aligned with cyberhygiene standards established by the Cyber Security Agency of Singapore (CSA), that are suitable for small healthcare providers such as solo practitioners.

MOH has also been working closely with Clinic Management System vendors to incorporate some of these cybersecurity requirements into their systems, to reduce the compliance burden faced by healthcare providers.

MOH will be issuing other resources to provide guidance on the security measures, including infographics, guides, checklists and training materials, which are specifically tailored to the needs of small healthcare providers. This should enable healthcare providers to self-help, understand, and meet the necessary requirements.  

MOH is also engaging cyber and data security consultants qualified by CSA to develop standardised basic security packages for healthcare providers, with transparent pricing structures, which will address the concerns that Mr Ching raised. These consultancies will also be asked to clearly distinguish between services to address essential requirements versus optional services. Healthcare providers that encounter unethical practices by such consultancies can report them to MOH and CSA.

The HIA ensures that Singaporeans can benefit from better coordinated care, enhanced quality of care and lower costs. We will work with and support healthcare providers to achieve this goal.  

Colin Lim 
Chief Information Officer 
Ministry of Health