Ethical Hacking

1
SEMINAR ON STANDARDISATION IN ICT Auditorium,
Level 1 Block-5 SIRIM Berhad 10 August
2004 Organised by Standard Akreditasi Malaysia
and SIRIM
THE NEED FOR THE ESTABLISHMENT OF NATIONAL ICT
STANDARDS IN MALAYSIA By Kunaseelan
Rajaretnam Malaysia National Computer
Confederation (MNCC)
2
THE SCOPE OF ICT STANDARDS REQUIREMENTS IS VERY
WIDE
THE NEED FOR STANDARDS BECOME CRITICAL AS
INFORMATION SYSTEMS BECOME MORE COMPLEX AND MOVE
FROM DEPARTMENT CENTRIC APPLICATIONS TO
ENTERPRISE-WIDE APPLICATIONS

• THE SCOPE TYPICALLY WILL HAVE TO COVER
• HARDWARE
• SOFTWARE
• COMUNICATION
• APPLICATION SYSTEMS

• THE REQUIREMENTS INCLUDE
• INTEGRATION
• CONNECTIVITY
• PORTABILITY
• INTEROPERABILITY
• SCALABILITY
• SECURITY

3
THE SCOPE ICT OF STANDARDS
THREE MORE AREAS THAT REQUIRE SOME DEGREE
OF STANDARDISATION ARE

• INFORMATION SYSTEM DEVELOPMENT STANDARDS

• STANDARDISATION IN ICT JOB CLASSIFICATION, JOB
  FUNCTIONS
• AND COMPETENCY ASSESSMENT

• ICT PROJECT MANAGEMENT STANDARDS

4
APPLICATION DEVELOPMENT STANDARDS REQUIRED
INCLUDE THE KEY STEPS IN THE INFORMATION SYSTEM
DEVELOPMENT LIFE-CYCLE

• REQUIREMENTS ANALYSIS
• REQUIREMENTS SPECIFICATIONS
• APPLICATION ARCHITECTURE
• SOLUTION ARCHITECTURE
• SOFTWARE DETAIL SPECIFICATION
• SOFTWARE CODING
• QUALITY TESTING
• SOFTWARE CONFIGURATION MANAGEMENT
• SOFTWARE VERSION CONTROL

THE ABOVE STANDARDS BECOME CRITICAL PARTICULARLY
WHEN DIFFERENT TEAMS ARE ASSIGNED FOR VARIOUS
COMPONENTS
5
TYPE OF EXPERTISE REQUIRED VARIES ACCORDING TO
TYPE OF ICT ORGANISATION

• 1. USER ORGANISATION
• SOFTWARE DEVELOPER
• SYSTEM INTEGRATOR/SOLUTION IMPLEMENTOR
• 4 APPLICATION SERVICE PROVIDERS (ASP)
• 5. INTERNET-ENABLED SERVICE PROVIDERS
• 6. READY-MADE SOFTWARE VENDORS
• 7. ICT INFRASTRUCTURE VENDORS

6
ICT STANDARDS HAS TO EVELOVE IN KEEPING WITH
CHANGING TECHNOLOGY
IN ICT, STANDATDS DOCUMENTS WILL HAVE TO BE
CONSIDERED AS LIVING DOCUMENTS
7
THE BROAD CHANGING TRENDS IN TECHNOLOGY AND
APPLICATION
BEFORE 1975
1975-1985
1985 - 1995
1995 -2005
PERVESIVE COMPUTING THRU INTEGRATED MOBILE
INTRNET APPLIANCES AND WEB-ENABLED APPLICATIONS
REAL-TIME HOST-BASED CLIENT-SERVER COMPUTING
ONLINE APPLICATIONS
STANDALONE PC APPLICATIONS
REAL-TIME ENTERPRISE MULTI-TIER
CLIENT-SERVER COMPUTING
BATCH DATA PROCESSING
BATCH DATA PROCESSING
BATCH DATA PROCESSING
MAINFRAME CLIENT-SERVERS, PCs, MOBILE INTERNET
APPLIANCES
MAINFRAMES, SERVERS AND PCs
MAINFRAME COMPUTERS
MAINFRAME AND MINI COMPUTERS
8
CHANGING TECHNOLOGY AND APPLICATION TRENDS
BEFORE 1985
1985 - 1995
1995 -2005
PROJECT MANAGERS
SYSTEM INTEGRATORS
SYSTEM INTEGRATORS
WEB DESIGNERS
SYSTEMS ANALYSTS AND PROGRAMMERS
APP ARCHITECTS, SYSTEMS ANALYSTS, PROGRAMMERS
DATABASE ADMINISTRATORS
SECURITY SPECIALISTS
SYSTEM ADMINISTRATORS
SYSTEMS ANALYSTS AND PROGRAMMERS
DATABASE ADMIN
SYSTEM ADMIN
NETWORK ENGINEERS AND NETWORK ADMINISTRATORS
SYSTEM ADMINISTRATORS
NETWORK ENGINEERS AND NETWORK ADMIN
COMPUTER ENGINEERS AND TECHNICIANS
COMPUTER ENGINEERS AND TECHNICIANS
COMPUTER ENGINEERS AND TECHNICIANS
9
CURRENT ICT JOB FUNCTIONS AND MARKET SEGMENTS
JOB TITLES/ AREAS OF EXPERTISE
MARKET SEGMENTS

• ICT STRATEGIC PLANNING
• PROJECT MANAGEMENT
• BUSINESS PROCESS RE-ENGINEERING
• CHANGE MANAGEMENT
• SECURITY MANMENT PLANNING AND AUDITING

ICT MANAGEMENT CONSULTANCY
SYSTEM INTEGRATION

• INFRASTRUCTURE AND NETWORK INTEGRATION
• INTEOPERABILITY STANDARDS
• APPLICATION INTEGRATION

SOFTWARE DEVELOPMENT

• APPLICATION ARCITECT
• SOLUTION ARCHITECT
• SYSTEMS ANALYST
• DATABASE ADMINISTRATORS
• ANALYST PROGRAMMERS
• PROGRAMMERS
• WEB MASTERS, WEB DESIGNERS

INFRASURUCTURE INSTALLATION AND SUPPORT

• HARDWARE AND NETWORK ENGINEERS, TECHNICIANS
• SYSTEM ADMINISTRATORS INCLUDING OS, SYSTEM
• MANAGEMENT AND SECURITY TOOLS

SALES AND MARKETING

• COMPUTER HARDWARE, NETWORKS, SOFTWARE,
• SERVICES,

10
TYPES OF ICT ORGANISATIONS AND TYPE OF ICT
PERSONNEL REQUIREMENT NEED FOR STANDARDISATION
IN JOB TITLES AND JOB FUNCTIONS IN
1. USER ORGANISATION
BROAD JOB CLAFFIFICATION
SPECIFIC JOB TITLES/FUNCTIONS
SYSTEMS ANALYST SYSTEMS ANALYST ANALYST
PROGRAMMERS COMPUTER TECHNICIAN

• BUSINESS ANALYSIS
• BUSINESS PROCESS REENGINEEING
• CHANGE MANAGEMENT
• SYSTEM IMPLEMENTATION
• SYSTEM ADMINISTRATOR
• NETWORK ADMINISTRATION
• SECURITY ADMINISTRATOR
• APPLICATION ADMINISTRATION
• USER TRAINING CORRDINATOR
• TECHNICAL SUPPORT
• APPLICATION SYSTEM SUPPORT
• HELP DESK SERVICE
• INFRASTRUCTURE 1ST. LEVEL MAINTENANCE
• NETWORK MAINTENANCE

-
11
SOFTWARE DEVELOPMENT ORGANISATION
BROAD JOB CLAFFIFICATION
SPECIFIC JOB TITLES/FUNCTIONS

• APPLICATION ARCHITECT
• SOLUTION ARCHITECT
• SYSTEMS ANALYSIS AND DESIGN
• DATABASE ADMINISTRATOR -DESIGN
• SYSTEM PROGRAMMER
• ANALYST PROGRAMMER
• PROJECT MANAGER
• PROGRAMMER
• SYSTEM TESTER
• WEB MASTER/ WEB DESIGNER
• INSTRUCTIONAL DESIGNER
• MULTIMEDIA GRAPHIC DESIGNER

SYSTEMS ANALYSTS SOFTWARE ENGINEER MULT
IMEDIA SPECIALIST
12
ICT ORGANISATIONS AND TYPE OF ICT PERSONNEL
REQUIREMENT
SYSTEM INTEGRATOR/ SYSTEM IMPLEMENTATION
ORGNISATION
BROAD JOB CLAFFIFICATION
SPECIFIC JOB TITLES/FUNCTIONS

• PROJECT MANAGER
• SOLUTION ARCHITECT
• SYSTEMS ADMINISTRATOR
• NETWORK DESIGN AND MANAGEMENT
• DATABASE ADMINISTRATOR MAINTENANCE
• TECHNICAL SUPPORT SOFTWARE
• TRAINER OF USER TRAINERS
• TECHNICAL SUPPORT INFRASTRUCTURE
• NETWORK DESIGN AND MANAGEMENT
• INFRASTRUCTURE MAINTENANCE
• NETWORK MAINTENANCE

SYSTEMS ANALYSTS SYSTEMS ANALYST ANALYST
PROGRAMMERS SYSTEM ENGINEER SYSTEM TECHNICIAN
13
ICT ORGANISATIONS AND TYPE OF ICT PERSONNEL
REQUIREMENT
INTERNET-ENABLED SERVICE PROVIDERS
TYPICALLY INVOLVED IN FOLLOWING SERVICES WEB
HOSTING INTERNET SEARCH ENGINES SEVICE CALL
CENTRE SESRVICES OUTSOURCED ONLINE DATA ENTRY
SERVICE
BROAD JOB CLAFFIFICATION
SPECIFIC JOB TITLES/FUNCTIONS
MANAGER SOFTWARE ENGINEERS SYSTEM
ENGINEER COMPUTER TECBNICIANS WEB
MASTER/DESIGNERS eCOMMERCE SPECIALIST CALL
CENTRE AGENT DATA ENTRY OPERATORS

• SUBJECT MATTER SPECIALIST
• APPLICATION /SOLUTION ARCHITECTS
• BUSINESS ANALYST/ APPLICATION ANALYST
• SYSTEM ANALYST AND DESIGNERS
• ANALYST PROGRAMMERS
• PROGRAMMERS
• SYSTEM ADMINISTRATOR
• NETWORK ADMINISTRATOR
• BATABASE ADMINISTRATOR
• COMPUTER AND NETWORK TECBNICIANS
• WRB MASTER, INSTRUCTIONAL DESIGNERS
• GRAPHIC DESIGNERS
• CUSTOMER RELATIONS MANAGER
• CALL CENTRE AGENTS

14
ICT ORGANISATIONS AND TYPE OF ICT PERSONNEL
REQUIREMENT
APPLICATION SERVICE PROVIDER (ASP)
JOB CLASSIFICATION AND JOB FUNCTIONS IS SIMILAR
TO SOFTWARE DEVELOPERS AND SYSTEM INTEGRATORS
15

FOLLOWING IS A SET OF EXMAPLES OF NEED FOR
STANDARDS IN ONE APPLICATION AREA HEALTH
INFORMATICS
16
HEALTH INFORMATICS STANDARDS
IT IS POSSIBLE TO ACHIEVE INTEGRATION AND
INTEOPERABILITY OF HEALTH INFORMATION SYSTEM
SOLUTIONS FROM DIFFERENT SOLUTION PROVIDES IF
THEY ALL CONFORM TO COMMON HEALTH INFORMATICS
STANDARDSD
1. ADOPT HEALTH INFORMATICS INTERNATIONAL
STANDARDS FORChief Complains, Signs
Symptoms, Diagnosis, Prescriptions, Lab
Orders, Image Orders, Procedure Orders, Common
Terminology, Units of Measures, etc.
2. ADOPT NATIONAL CODING STANDARDS FOR
DEMOGRAPHIC AND LOCATION DATA
3. COMMON MESSAGGING STANDARD
4. COMMON APPLICATION ARCHITECTURE
5. TECHNICAL STANDARDS - CONFORM TO OPEN
SYSTEMS STANDARDS AS DEFINED IN THE MSC
TELEHEALTH STANDARDS DOCUMENT PARTICULARLY
IN INTEROPERABILITY, INTERCONNECTIVITY,
PORTABILITY AND SCALABILITY
6. SECURITY - CONFORM TO NATIONAL ICT SECURITY
POLICY FRAMEWORK
17
EXAMPLES OF POSSIBLE NATIONAL HEALTH INFORMATICS
STANDARDS
TYPE OF DATA
STANDARDS
MALAYSIAN
DEMOGRAPHIC DATA
NATIONAL REG. DEPT
LOCATION AND ADMINISTRATIVE DATA
MALAYSIAN MOH(HMIS) STATISTICS DEPT
CLINICAL CODING AND MESSAGING
INTERNATIONAL
CHIEF COMPLAINS, SIGNS SYMPTOMS, DIAGNOSIS, LAB
ORDERS, IMAGE ORDERS REPORTING, PROCEDURES,
DRUGS
HL-7, READ-CODE, ICD-10, ETC.
CLINICAL SUPPORT EQUIPMENT INTERFACE
INTERNATIONAL
ASTM-E31.14, DICOM-3, ASTM E31.16, IEEE TC
P107, CEN TC PT125/007
LAB EQUIPMENTS, IMAGING, ECG, ICU MONITORS, ETC.
18
Example HEALTH INFORMATICS - CLINICAL CODING
STANDARDS
TYPE OF DATA POSSIBLE CODING STANDARDS
READ CODE READ CODE ICD-10 ATC ICD-10 PCS,
READ, SNOMED, LOINC ICD-10 PCS, READ ICD-10
PCS, READ

• CHIEF COMPLAINS
• SIGNS SYMPTOMS
• DIAGNOSIS
• DRUG PRESCRIPTION
• LAB ORDERS TEST RESULTS
• IMAGE ORDERS REPORTING
• PROCEDURES

19
Criteria for Selection of Health Informatics
Coding Standards

• International Standard
• Public Domain Standard (Non-proprietary)
• Ease to understand and use by end-user and App
  developers
• Comprehensive and Suitable for application in
  Hospitals, Health Clinics, Health Labs, and
  Blood Banks
• Coding Structure must allow for Expandability and
  Customisation
• Facilitate mapping with other Local or
  International Coding Standards
• Widely Used
• Facilitate Itemised Billing, Cost Studies such as
  Case-mix or DRG,

20
CLINICAL INFORMATION SYSTEM INTEGRATION STANDARDS
Clinical Support Systems
Clinical Information System
MEDICAL EQUIPMENTS
LIS
SIGNS SYMPTOMS
ASTM-E31.14
LAB EQUIP.
(READ)
HMIS (ICD-10)
DIAGNOSIS (READ)
Messaging HL-7
LAB INVESTIGATIONS (READ)
DICOM-3
IMAGING MODALITIES
RIS
IMAGE INVESTIGAT.
PACS
ECG
PRESCRIPTION (READ)
CENT TC 125/007
PROCEDURES (READ)
OTIS
ASTM E31.16
EEG
CLINICAL CHARTING
DISCHARGE SUMMARY
IEEE.TC P107
ICU
CRITICAL CARE MONITOR
CONTENT INTERFACE (MeSH)
BILLING INTERFACE
21
TOWARDS MALAYSIAN NATIONAL HEALTH INFORMATICS
PURPOSE TO PROPOSE THE ESTABLISHMENT
OF A NATIONAL HEALTH INFORMATICS
STANDARDS FOR MALAYSIA
OBJECTIVETHE HEALTH INFORMATICS STANDARD
IS NEEDED TO FACILITATE
SUCCESSFUL INTEGRATION OF
HEALTH INFORMATION SYSTEMS
IN THE COUNTRY
22
MALAYSIAN NATIONAL HEALTH INFORMATICS STANDARDS
STRATEGY FOR IMPLEMMENTATION
1. INTRODUCE A SET OF HEALTH INFORMATICS
STANDARDS THAT ARE NECESSARY TO HELP ACHIEVE
THE REQUIRED INTEGRATION OF HEALTH INFORMATION
SYSTEMS IN MALAYSIA. THIS HAS TO BE DONE BY
CONSENSUS AND UNDER THE PERVIEW OF MOH AND
SIRIM. 2. APPOINT AN INDEPENDENT BODY SUCH AS
THE MALAYSIAN HEALTH INFORMATICE ASSOCIATION TO
FORMULATE THE DRAFT STANDARDS. VARIOUS
INTERESTED PARTIES MUST BE REPRESENTED IN THE
INITIATIVE. 3. WHEREVER POSSIBLE ADOPT AND
ADAPT ESTABLIDHED INTERNATIONAL STDS.
4. ESTABLISH WORKING RELATIONS WITH RELEVANT
INTERNATIONAL HEALTH INFORMATICS STANDARDS
ORGANISATIONS AND SEND REPRESENTATIVES TO
ATTEND THE TECHNICAL COMMITTEE MEETINGS,
INITIALLY AS OBSERVERS. 5. PUBLISH THE
RESULTANT STANDSRDS AS PUBLIC DOMAIN STANDARDS.
IT IS TO BE OWNED BY THE GOVERNMENT. 6. PASS
LEGISLATION TO HAVE ONLY ONE NATIONAL HEALTH
INFORMATICS STANDARD FOR THE COUNTRY AND TO USE
THE STANDARDS BASED SOLUTIONS. 7. PASS
LEGISLATION TO MANDATE ALL HEALTHCARE
INFORMATION SYSTEMS IN THE COUNTRY TO PROVIDE
FOR INTEGRATION TO THE STANDARD LHR. 8, FROVIDE
FUNDING TO MOTIVATE EXISTING SYSTEMS IN BOTH THE
PUBLIC AND PRIVATE SECTORS TO IMPLEMENT THE
REQUIRED STANDARDS AND INTEGRATION.
23
THANK YOU