Top Banner
Healthcare Enterprise Architecture นายแพทย์ สุธี ทุวิรัตน์ CISA 20 ตุลาคม 2557 1
35

Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Mar 25, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Healthcare Enterprise Architecture

นายแพทย สธ ทวรตน CISA

20 ตลาคม 2557

1

Page 2: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

My Profile

•Certified Information System Auditor (CISA)

• Area of Expertise

•Healthcare Enterprise Architecture

•Healthcare Business Process Re-engineering

•Healthcare Lean-Six Sigma

•Healthcare Total Quality Management

•Healthcare Supply Chain Management & Logistics

•Healthcare Information Security

•Medical Device Security

•Enterprise Risk Management

•Marketing Strategy

2

Page 3: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

3

My Profile • Committee

• สมาคมเวชสารสนเทศไทย (www.tmi.or.th)

• ประธานดานวจยและพฒนา-สมาคมผควบคมและตรวจสอบระบบ

สารสนเทศ-ภาคพนกรงเทพ (www.isaca-bangkok.org)

• ประธานดานวชาการ-สมาคมสถาปนกเทคโนโลยสารสนเทศประเทศไทย (www.iasathailand.org)

• อปนายก-สมาคมความมนคงปลอดภยคลาวดคอมพวตงประเทศไทย (www.csathailand.org)

• Open Web Application Security Project, Thailand

Chapter (www.owasp.org)

Page 4: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

4

My Profile • IT Consultant

• Government Pharmaceutical Organization ( EA Initiative

Project)

• FDA EA Education & Training

Page 5: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

5

My Profile

• ทปรกษาโครงการ Thailand Health IT Safety Project

• สถานเอกอครราชทตองกฤษ ประจ าประเทศไทย

• ส านกงานพฒนาธรกรรมทางอเลกทรอนกส (องคการมหาชน)

(www.etda.or.th)

• สมาคมความมนคงปลอดภยระบบสารสนเทศ (www.tisa.or.th)

• สมาคมผตรวจสอบและควบคมระบบสารสนเทศ ภาคพนกรงเทพ

(www.isaca-bangkok.or.th)

• บรษท บเอสไอกรป (ประเทศไทย)

5

Page 6: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

What is Enterprise Architecture

Healthcare Enterprise Architecture

6

Objectives

Page 7: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

What is Architecture

7

Page 8: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

8

Page 9: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

9

Page 10: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

What is Enterprise Architecture

10

Page 11: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

11

Enterprise Architecture Enterprise Governance

Knowledge Engineering • Process Insight • Customer Insight • Competitors Insight

IT & Industrial Automation

Enterprise Risk Management

Information Risk Management

Operation Risk Management

• Value Engineering • Business Innovation

• Business Agility • Business Continuity

Page 12: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

12

Enterprise Architecture Enterprise Governance

Knowledge Engineering • Data Standard • Data Interchange Standard • ISMS

IT & Industrial Automation

Enterprise Risk Management

Information Risk Management

Operation Risk Management

• COBIT • COSO • QMS

• ITIL • Cloud Computing • Cloud Security

Page 13: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Enterprise Architecture

13

Design Implement

Page 14: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Enterprise Architecture

14

Simple

Smart Speed

Smile

Page 15: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

15

ปญหาของการเอาไอทมาใชในองคกร

Business Processes Application Architecture

Paper Information Electronic Information

Page 16: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

16

Current Situation

Page 17: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

17

Business Process Re-Design

Page 18: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

18

Business Process Re-Design

Page 19: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

19

Business Process Harmonization

Data & Data Interchange Standard & Security Standard

Supply Chain Integration

Page 20: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

How to Implement Enterprise Architecture

20

Page 21: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Governance by Design

Efficiency by Design

Secure by Design

21

Enterprise Architecture

Page 22: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

COBIT5

COSO ERM

Regulatory Compliance

22

Governance by Design

Page 23: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

23

Current Processes Current Process

Efficiency by Design

Page 24: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

24

Efficiency by Design

Current Processes New Business Process

Page 25: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

25

Secure by Design New Business Process

Enterprise IT Infrastructure

Data Standard

Data Interchange Standard

Security Standard

Page 26: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Enterprise Architecture

26

Vision

- Business Innovation Architecture

- Governance by Design

- Efficiency by Design

- Secure by Design

Implementation

- Business Transformation

- High Performance Organization

Page 27: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

27

Continuous Improvement

Page 28: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Healthcare Enterprise Architecture

28

Page 29: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Public Safety *****

Patient Safety *****

Information Security & Privacy ***

Operation Efficiency ***

29

Healthcare Enterprise Architecture

Page 30: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Manufacturer Warehouse Transport Distributor Doctor

Nurse

MT

RT

DT

Pharmacist

CRM

PT

Patient

สปสช. สปส. กรมบญช คสญญา

Supply Chain & Logistics

Healthcare Enterprise Business Process

ทกคนตางก าหนดรหสสนคาและผลตภณฑของตนเอง Clinical Information

System &

Patient Safety

Reimbursement

แตละกองทนก าหนดรหสยาและเวชภณฑของตนเอง

ไมมมาตรฐานการเชอมโยงขอมลของ EMR

(Syntactic & Semantic Interoperability )

Page 31: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare
Page 32: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

Registration & Regulation

Manufacturer Distributor Hospital Reimbursement

Electronic Submission ERP ERP EMR Payment System

MRP Warehouse Automation System

Hospital Information System

LIMS Building Automation System

Clinical Information System

Industrial Automation LIS

Industrial Control System

RIS & PACS

Building Automation System

Medical Devices

SUPPLY CHAIN

Electronic Transaction & EDI

Patient Safety & Traceability & Recall

INFRASTRUCTURE

Data Standard & Data Interchange Standard

Information Security Standard

Page 33: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

HVAC Warehouse Automation

BAS

Medical Device Backdoor

Medical Device Backdoor

Page 34: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

[email protected]

www.tmi.or.th/blog

34

Q&A

Page 35: Healthcare Enterprise Architecture - Kasetsart Universitysrp/204111/HEALTHCARE.pdf · My Profile •Certified Information System Auditor (CISA) • Area of Expertise •Healthcare

35