SIPPAPAS WANGSRI

Thanks for the great presentation! This is really a good project and very beneficial for improving health care system and interoperability. A good step for our country as for today, we still have to manually request health records from other hospital which takes time and delay the treatment. One day I hope this could get rid of those limitations!

I agree upon your statement that it was difficult moving from paper-based to electronics since we already have a large amount of data beforehand, but we could start digitising them from now on.

According to a paper by Shaw T, et al. on “What is eHealth (6)?”, there are several definitions that can explain “eHealth”. In your opinion, what should be a definition of eHealth?

eHealth — first, what does the first letter e stand for? Emerging? Evolving? or Electronic (as in E-mail)? In this context, many people might agree on “electr…[Read more]

Can you give an example of data that you think it could be considered as “Big Data”? What are the characteristics of the data that fit into 5Vs, or 7Vs, or 10Vs of Big data characteristics?

We are in the world full of collections of data, which have been stored many years back and is tremendously increasing over time. Since my personal bac…[Read more]

Have you ever observed a health informatics project in your (other) organization? Please provide a brief introduction.
– The most obvious health informatics project to me is about MorProm and Thai-Chana project, established during COVID-19 outbreaks. Once, they were tools to help a government monitor the disease outbreak and significant contact…[Read more]

I agree that the very mistaken point in this case is caused by human error. Nevertheless, SSN numbers should not be stored in plain sight by any means because it can directly identify a specific person. It should be de-anonymised/psudonymised or encrypt it before storing in the database that has a potential access by a developer or clients. In…[Read more]

I don’t mean to discredit Meta by any ways but it occurs to me that Meta or Facebook is a very infamous company regarding privacy issues. By providing health care service, trust no one to handle such a sensitive and confidential information and avoid using third-party integration as much as possible as we do not know what kind of source code…[Read more]

In my opinion, although not a preventive measure, event logs could be used to trace suspicious activity. To prevent this kind of attack, raising employees about Phishing attack such as carefully check the correct URL is crucial and is utmost important. After phishing is successfully done, the compromised credentials need to be revoked as soon as…[Read more]

This is very interesting situation! Even a security company can be hacked and this, of course, can be a main target for attackers. Luckily they could detect unusual activity within time. This clearly showed us that even multi-factor authentication can also be compromised by impersonation. I wonder how the hacker could access the other…[Read more]

Right! You’ve got a point! I have looked into SaaS solution and there are some hospital management platform (well, some clinics use them as well) it is a cloud solution. The only downside is that they are not customisable for the needs, so basically you have to use their service as is.

If I have to develop a web-based application for appointing patients and allow users to provide important information, I’d rather go with cloud computing. In a scenario where there is limited personnel resources, particularly who takes care of a network, a cloud-computing model is the best way to go. By using cloud system, the whole infrastructure…[Read more]

Identify some possible means as attacker could use to conduct a security attack

First of all, I’d like to say that I am not from an IT or specific field in computer science. From my experience, I have seen multiple ways for an attacker to “hack” a network system. By the term “hacking”, I mean the situation when someone gains an unauthorised…[Read more]

I’d like to share a project from my current workplace. It is a system designed for Cohort Intermediate Ward, OPSI clinic (Out-Patient with Self Isolation) and Home Isolation during COVID-19 pandemic for patient evaluation and follow-up. This system is considered as a part of self-designed EMR and being used only within my hospital. It allows…[Read more]

I really love your reply. Very comprehensive and insightful. Agreed in every aspect!

I am currently a physician, with medical background as well as some IT knowledge. To be a good health informatician, we need to deal with multiple disciplines effectively. It means that we also need basic knowledge in each particular field to be able to communicate and act as a ‘bridge’ between them. The most important skill in my opinion is a lead…[Read more]

Believe it or not, this issue has been an unresolved issue for years at my hospital where I currently work at. Self-maintaining servers and managing resources are indeed very exhausting and require much effort, skills and of course — money. Moving all that to the cloud is very challenging but worth the effort as we do not have to do the…[Read more]

I won’t click on anything and will just close them in an instant since I know that those messages are fake. Although some fine-crafted spam website may seem legit, based on my experience and my knowledge, I knew that antivirus are not supposed to run on a website. Well, if you happen to click on the ‘Clean’ button, whether accidentally or out of…[Read more]

My workplace, a server for main HIS system was once attacked by a ransomware. No one knew where it came from, yet it is not that anyone should take the blame. The hospital information system was down for about a day before the recent backup has been restored. Since then, an information system security literacy has been enforced. I’m quite sure…[Read more]