Page 166 - Hospital Authority Annual Report 2015-1016

Appendix 3
附錄 3

Focus of Work in 2015-16 2015-16 年度工作概況

Appendices In 2015-16, the Committee met four times to discuss various issues 在 2015-16 年度，委員會共召開四次會議，討論
relating to the strategic development of IT / information systems 醫管局資訊科技 / 資訊系統策略發展的各方面事
in HA. During this period, the Committee discussed the plan for 宜。年內，委員會討論加強醫管局資訊科技創新
greater IT innovation solutions for HA and the proposal of various 方案及多個資訊科技轉型方案，以提升效益和表
IT transformation initiatives to enhance efficiency and performance 現，惠及病人和員工。委員會亦討論資訊科技及
with an ultimate goal to benefit both patients and staff. It also 醫療信息部轄下資訊科技服務的未來方向，確保
discussed the future direction for IT service management under the 醫管局的資訊科技生產系統及服務更有成效。委
IT and Health Informatics Division (IT&HID) for effective support of IT 員會收閱資訊科技運作風險評估報告，討論所識
production systems and services in HA. Reports on IT Operational Risk 別的主要風險及可採取的緩減措施，特別是 2016
Assessment were received with discussion on the key risks identified 年 3 月電子健康紀錄互通系統推出後的相關潛在
and the actionable mitigating measures in particular against the 風險；以及備悉資訊科技政策及標準框架修訂進
potential risks associated with the launch of Electronic Health Record 展報告，資訊科技及醫療信息部建立中央電子文
Sharing System (eHRSS) in March 2016. The Committee also received 件庫等事宜。
progress update on the revamp of IT policies and standards whereby
a centralised electronic document management system for IT&HID
documents was set up.

164 In the area of privacy and data protection, the Committee discussed 另外，委員會亦就保障病人私隱及數據安全的相

the work on security controls, compliance monitoring and privacy 關政策、合規監察和私隱風險評估等方面的工作
impact assessment in HA. To meet the growing demand for IT systems 提供意見。為支援機構運作的需要，切合對資訊

to support the operation of the organisation, the Committee endorsed 科技系統不斷增加的需求，特別是因應醫管局檢

Hospital Authority Annual Report 2015-2016 the IT Block Vote Submission for 2016-17 and the IT&HID Annual 討行動計劃的推行及醫管局 2017 至 2022 年策略

Work Plan 2016-17 for responding to challenges in continuing existing 計劃所訂優次，委員會通過 2016-17 年度資訊科

service delivery and delivering the major strategic IT-enabled projects in 技 整 體 撥 款 申 請， 以 及 資 訊 科 技 及 醫 療 信 息 部
particular in light of the implementation of HA Review Action Plan and 2016-17 年度工作計劃，務求回應當前挑戰，維

the priorities emanating from the HA Strategic Plan 2017-2022. 持現行服務及推行各項倚重資訊科技的主要策略

性項目。

To fulfil its overseeing functions, the Committee monitored the 為履行其監督職能，委員會監察資訊科技及醫療
implementation of the work stipulated in the IT&HID Annual Plan by 信息部周年工作計劃的實施，在各次會議上均有
considering, amongst others, the performance and status reports of 審閱不同資訊科技職能的表現及狀況報告，有關
respective IT functions at each of its meeting, the comments of which 意見會向部門相關工作團隊傳達，以供跟進。委
were conveyed to the relevant working teams under IT&HID for follow- 員會會議的常規議程項目包括第三期臨床醫療管
up actions. Progress Update on Clinical Management System Phase III, 理系統、業務支援資訊科技系統、電子健康紀錄
Business Supporting IT Systems, eHealth Record Projects and IT Services 互通系統及資訊科技服務表現的進展報告。委員
Performance were among the standing agenda items of the Committee’s 會亦監察資訊科技及醫療信息部為政府開發電子
meetings. The Committee also monitored the ongoing efforts of IT&HID 健康紀錄互通系統的持續進度（醫管局擔任技術
on the development of the Government’s eHR Programme for which HA 代理），並就醫管局作為該系統主要使用者的準備
was the technical agent, discussed the preparation of HA participating as a 工作提供意見，以及每年通過相關的經審核財務
major user of eHRSS and endorsed the draft audited financial statements 報表擬本。
related to eHR Programme undertaken by HA annually.

To support HA’s service needs with the latest trend of IT technical 為利用最新資訊科技發展支援醫管局的業務需
development, the Committee received advice from the Information 要，委員會收閱信息技術諮詢小組委員會就資訊
Technology Technical Advisory Subcommittee (ITTASC) on the IT technical 科技及醫療信息部建議的資訊科技架構及選擇方
architectures and technology selections proposed by IT&HID which 案提供意見，包括流動化架構及應用程式發展、
included mobile architecture and application development; IT-enabled 醫管局資訊科技創新項目、大數據分析，以及在
innovation in HA; big data analysis and use of social media in HA etc. The 醫管局內應用社交媒體等。委員會亦通過委任及
Committee also approved the new appointment and reappointments of 續委小組委員會成員名單，並定期聽取其意見。
ITTASC membership and received regular inputs from it.

As a good corporate governance practice, the Committee conducted 為體現良好機構管治，委員會進行了自我評核，
a self-assessment exercise in reviewing its activities in the past year 根據其職權範圍檢討過去一年的工作。
according to its Terms of Reference.