Page 149 - Hospital Authority Annual Report 2016-2017

Hospital Authority Annual Report 醫院管理局年報 2016-2017

Appendix 3
附錄 3

8. Consider matters relating to risk, risk management and risk 8. 審議醫管局資訊科技範疇的相關風險、風險
mitigation relevant to Information Technology across Hospital 管理及風險緩減事宜。
Authority.

Focus of Work in 2016-17 2016-17 年度工作概況

In 2016-17, the Committee met four times to discuss various issues 在 2016-17 年度，委員會共召開四次會議，討論醫
relating to the strategic development of IT/information systems in HA. 管局資訊科技 / 資訊系統策略發展的各方面事宜。
During this period, the Committee discussed the progress update of HA’s 年內，委員會討論資訊科技及醫療信息部負責的醫
IT transformation as the basis for the future direction of IT organisational 管局資訊科技轉型的進展報告，就機構資訊科技設
design in HA undertaken by the IT and Health Informatics Division (IT&HID), 計未來的方向，以提升機構效率，引進新服務模式
with an ultimate goal for organisational efficiency to bring in new service 及創新科技，優化病人的醫護歷程。委員會就多方
model and technology innovation to enhance patient journey. Thorough 面的策略進行詳細討論，包括人力資源、程序及科
discussions were made on the multi-facet strategies comprising key 技轉型的主要元素，以及應對系統持續性、發展與
components to transform people, process and technology, with a number 轉型方面的資源限制，和有效應付未來資訊科技挑
of transformation initiatives to address the challenges of system reliability, 戰的各項措施。委員會亦收閱有關醫管局終端用戶
resource constraints to build and transform, and an effective ability to 及桌面支援服務的檢討報告，並審議終端用戶電腦
manage future IT challenges. The Committee also received a report on 應用支援服務的未來路向。在風險管理方面，委員
the review findings of end user and desktop support services in HA and 會收閱資訊科技運作風險評估報告，討論所識別的
considered the way forward for end user computing support services. 主要風險及可採取的緩減措施，特別是應對網絡攻
In the area of risk management, the Committee received a report on IT 擊的相關潛在風險。
Operational Risk Assessment and discussed the key risks identified and
the actionable mitigating measures particularly against the potential risks
associated with cyberattacks.

The Committee deliberated and approved the portfolio-based and holistic 委員會審議及通過 2017 至 2022 年資訊科技策略，
approach of IT Strategy 2017-22 which demonstrated the linkage from HA’s 策略以組合為本及通盤全面方式，體現與醫管局
five-years strategic plan, devised to 20 IT strategies, then enabled by over a 2017 至 2022 年策略計劃的連繫，在未來五年透過
hundred of IT programmes in the next five years. It also supported the key 20 項資訊科技策略，推行逾百個資訊科技項目，並
mechanisms for executing the IT Strategy. Moreover, to meet the growing 支援實施資訊科技策略的主要機制。此外，為支援
demand for IT systems to support the operation of the organisation, 機構運作的需要，切合對資訊科技系統不斷增加的
the Committee endorsed the IT Block Vote Submission for 2017-18 and 需求，委員會通過 2017-18 年度資訊科技整體撥款
the IT&HID Annual Work Plan 2017-18 for responding to challenges in 申請，以及資訊科技及醫療信息部 2017-18 年度工
continuing existing service delivery and delivering the major strategic 作計劃，務求回應當前挑戰，維持現行服務及推行
IT-enabled projects, in particular in light of the implementation of HA 各項倚重資訊科技的主要策略性項目，特別是落實
Review Action Plan and the priorities emanating from the HA Strategic Plan 醫管局檢討行動計劃和醫管局 2017 至 2022 年策略
2017-22. 計劃所訂優次。

To fulfil its overseeing functions, the Committee monitored the 為履行其監督職能，委員會監察資訊科技及醫療信
implementation of the work stipulated in the IT&HID Annual Plan by 息部周年工作計劃的實施，在各次會議上審閱不同
considering, amongst others, the performance and status reports of 資訊科技職能的表現及狀況報告，並將有關意見傳
respective IT functions at each of its meeting, the comments of which 達部門相關組別，以供跟進。委員會會議的常規議
were conveyed to the relevant working teams under IT&HID for follow-up 程項目包括第三期臨床醫療管理系統、業務支援資
actions. Progress Update on Clinical Management System Phase III, 訊科技系統、電子健康紀錄互通系統及資訊科技服
Business Supporting IT Systems, Electronic Health Record (eHR) Projects 務表現的進展報告。委員會亦監察資訊科技及醫療
and IT Services Performance were among the standing agenda items of 信息部為政府開發電子健康紀錄互通系統的持續進
the Committee’s meetings. The Committee also monitored the ongoing 度（醫管局擔任技術代理），並就醫管局作為該系統
efforts of IT&HID on the development of the Government’s eHR Programme 主要使用者的準備工作提供意見，以及每年通過相
for which HA was the technical agent, discussed the preparation of HA 關的經審核財務報表擬本。
participating as a major user of eHR Sharing System and endorsed the draft
audited financial statements related to eHR Programme undertaken by HA
annually.

145