\n<\/p>\n
SINGAPORE \u2013 A \u201cpreventable lapse\u201d involving a missed security update to a shared domain name system led to a 9\u00bd-hour public healthcare service outage on Oct 13<\/span><\/a>, Parliament heard.<\/p>\n Affected services included appointment bookings, visitor registration, medication dispensing and billing, Senior Minister of State for Health Tan Kiat How said on Nov 3.<\/p>\n He added that about 4,000 outpatient appointments were rescheduled, and some patients experienced delays of up to two hours. There were, however, no reported adverse incidents affecting patient safety as a result of the disruption.<\/p>\n The outage affected all three of Singapore\u2019s public healthcare clusters \u2013 NHG Health, National University Health System and SingHealth.<\/p>\n \u201cThis was a known change and a preventable lapse,\u201d Tan said, replying to questions from MPs over the cause and extent of the disruption, which was the longest in recent years.<\/p>\n MPs Joan Pereira (Tanjong Pagar GRC) and Poh Li San (Sembawang West) asked about the reason for the disruption and whether backup systems were in place, while Dennis Tan (Hougang) asked whether measures had been implemented to reduce the risk of such systemwide disruptions.<\/p>\n Tan Kiat How said the disruption occurred because the required security update to a shared domain name system (DNS) service was not completed before a scheduled global change.<\/p>\n DNS works like an address book, transforming website addresses into numerical IP addresses, which systems use to locate and connect to applications.<\/p>\n Tan said that while national health-tech agency Synapxe had contracted a service provider to manage the necessary update, it was not carried out. Synapxe is reviewing the provider\u2019s contractual obligations and will take appropriate action for any established lapses, he added.<\/p>\n \u201cRegardless of the outsourcing arrangement, Synapxe remains accountable for the resilience of its critical systems,\u201d he said.<\/p>\n He reiterated that the incident was not the result of a cyberattack and that there was no unauthorised access to patient data, which was not compromised or lost.<\/p>\n While abnormal activity was detected, time was required to identify the underlying problem, said Tan, who is also Senior Minister of State for Digital Development and Information.<\/p>\n Synapxe is strengthening monitoring and fault diagnosis to enable faster recovery, he said, apologising for the inconvenience caused to patients and their families, as well as the resulting additional work for healthcare workers.<\/p>\n Singapore\u2019s public healthcare systems have backup infrastructure, including two data centres.<\/p>\n \u201cHowever, both depended on the same underlying DNS service and security configuration. Switching between them would therefore not have resolved this disruption,\u201d Tan said.<\/p>\n Synapxe will review such shared dependencies and strengthen alternative recovery arrangements, he said.<\/p>\n \u201cHealthcare institutions activated downtime procedures, with additional staff supporting operations and clinicians using selected read-only patient records and manual workflows to continue essential care.\u201d<\/p>\n To strengthen resilience against such incidents, the authorities are improving the tracking and verification of critical technical changes, said Tan, adding that shared dependencies are also being addressed and recovery arrangements improved.<\/p>\n He said that continuity of care during such incidents is also being strengthened by improving downtime systems, staff readiness and regular exercises, including for partial outages.<\/p>\n The Health Ministry will oversee the corrective actions and verify that they are effective, Tan said.<\/p>\n \u201cSynapxe has appointed an expert panel comprising representatives from other organisations that have similar engineering profiles to review the investigation findings and proposed remediation measures and identify further improvements,\u201d he said.<\/p>\n While digitalisation brings important benefits to healthcare, resilience must improve as systems become more interconnected, he added.<\/p>\n \u201cWe must make our technology more reliable while ensuring healthcare workers can continue caring for patients safely even when technology fails.\u201d<\/p>\n In a supplementary question, Yip Hon Weng (Yio Chu Kang) asked whether having Synapxe oversee the tech functions of the three healthcare clusters posed a concentration risk.<\/p>\n Tan said the global DNS service shared by the clusters and their systems was a \u201ctrust anchor\u201d \u2013 a term used for authoritative entities in computer security.<\/p>\n Decentralising the healthcare IT systems would not necessarily have prevented the disruption, but could instead have made diagnosis and recovery much more difficult, he said.<\/p>\n Yip also asked whether the Epic system used by private clinics here would be affected by such a concentration risk.<\/p>\n Tan said the authorities would look at such risks and dependencies as it sought to implement a shared electronic medical records system across providers.<\/p>\n The October disruption occurred after a previous incident in November 2023, when the websites of public hospitals and polyclinics here were hit by a seven-hour disruption.<\/p>\n The 2023 incident was caused by a distributed denial-of-service attack, in which attackers flooded servers with internet traffic, preventing users from accessing online services.<\/p>\n Synapxe said then that it would strengthen its system design for greater resilience against new forms of such attacks in the future.<\/p>\n<\/div>\n SINGAPORE \u2013 A \u201cpreventable lapse\u201d involving a missed security update to a shared domain name system led to a 9\u00bd-hour public healthcare service outage on…<\/p>\n","protected":false},"author":1,"featured_media":97377,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[2611],"tags":[],"class_list":["post-97376","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-buzz-headlines","wpcat-2611-id"],"_links":{"self":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/97376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=97376"}],"version-history":[{"count":0,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/97376\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/media\/97377"}],"wp:attachment":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=97376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=97376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=97376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
\n
Read Full Article At Source <\/a>
\n