Information Security Management UNIVERSITY OF SOUTH AUSTRALIA Assignment Cover Sheet - Group An Assignment cover sheet needs to be included with each assignment. Please complete all details clearly. If you are submitting the assignment on paper, please staple this sheet to the front of each assignment. If you are submitting the assignment online, please ensure this cover sheet is included at the start of your document. (This is preferable to a separate attachment.) Please check your Course Information Booklet or contact your School Office for assignment submission locations. Student Name (Print clearly) UniSAEmail ID 1.Gauri gauyy003@mymail.unisa.edu.au 2.Santhiya Rani Vijaykumar vijsy003@mymail.unisa.edu.au 3.Darusalam daryy002@mymail.unisa.edu.au Yayny001 @mymail.unisa.edu.au 4.NadiahYayao 5.TawandaChifamba chity006@mymail.unisa.edu.au 6.Paul Campbell campy002@mymail.unisa.edu.au Course code and title: INFS 3070/5055 – Information Security Management (M) Program Code: School: CIS Day, Time & Location of Tutorial/Practical: Tuesday/ 1:00 PM/ F1-24 (MLK) Course Coordinator: Helen Lee Ashman Tutor: Extension granted (Yes/No):No Due Date: August 22nd 2011 Assignment number &topic: Deliverable week 4 We declare that the work contained in this assignment is our own, except where acknowledgement of sources is made. We authorise the University to test any work submitted by us, using text comparison software, for instances of plagiarism. We understand this will involve the University or its contractor copying our work and storing it on a database to be used in future to test work submitted by others. We understand that we can obtain further information on this matter at http://www.unisa.edu.au/learningadvice/integrity/default.asp Note: The attachment of this statement on any electronically submitted assignments will be deemed to have the same authority as a signed statement. Signed: Date: 1.Gauri August 22nd 2011 2.Santhiya Rani Vijaykumar August 22nd 2011 3.Darusalam August 22nd 2011 4.NadiahYayao August 22nd 2011 5.TawandaChifamba August 22nd 2011 Group 9 The importance of IT in Ambulances Services 1 Information Security Management August 22nd 2011 6.Paul Campbell Date received from student Recorded: Assessment/grade Assessed by: Dispatched: Group 9 The importance of IT in Ambulances Services 2 Information Security Management Table of Contents Preliminary Information.................................................................................................................................. 4 1. Background ............................................................................................................................................... 6 2. Core functions ........................................................................................................................................ 8 2.1 AVL (Automatic Vehicle Location) System .......................................................................................... 8 2.2 Electrical Medical Equipment ............................................................................................................. 9 2.3 Government Radio Network (GRN) ............................................................................................. 9 2.4 Vehicle and Crew Dispatch ................................................................................................................ 10 2.5 Call Handling and Dispatching Systems .......................................................................................... 11 2.6 Mobile Data Terminal ....................................................................................................................... 12 3. Support Functions ................................................................................................................................... 13 3.1 ePCR (Electronic Patient care record) System ............................................................................... 13 3.2 AIMS System (Ambulance Information Management Solutions System) ....................................... 14 3.3 Payroll System ................................................................................................................................. 14 3.4 Telecommunications .......................................................................................................................... 15 3.5 Account Payable System ................................................................................................................... 15 3.6 CCTV ................................................................................................................................................. 15 4. Integration ................................................................................................................................................ 16 5. Security .................................................................................................................................................... 17 6. REFERENCES ........................................................................................................................................ 18 Group 9 The importance of IT in Ambulances Services 3 Information Security Management Preliminary Information Name Contact Made Task Researched on: TawandaChifamba Attended group meeting E-mail 1. Mobile Data Terminal 2. Call handling and dispatching system Researched on: NadiahYayao (Sumbit Attended group meeting E-mail 1. Electrical Medical Equipment System / the Core System Delivarable) 2. Aims System / support system Paul Campbell Attended group meeting E-mail Researched on: 1. SACAD system 2. Telecommunications VijaykumarSanthiya E-mail Rani Researched on: 1. CCTV 2. Account payable System Darusalam Attended group meeting (Minutes Taker) E-mail Researched on: 1. GRN / Core System 2. Payroll System Support system Group 9 The importance of IT in Ambulances Services 4 / Information Security Management Gauri Attended group meeting E-mail (Chairperson) Researched on: 1. Automatic vehicle Location (AVL) System / core system 2. ePCR (Electronic Patient care record) System / support system Group 9 The importance of IT in Ambulances Services 5 Information Security Management 1. Background The South Australia Ambulance service (SAAS) is the principle provider of ambulance services in South Australia. It provides emergency medical assistance, treatment and transport, non – urgent patient transport and highly – quality care to the people of South Australia. As an integral part of South Australia’s Health System, SAAS is committed to save lives, reduce suffering and enhance the quality of life. In doing so, SAAS uses information Technology to operate efficiently and fulfill its commitments. In order to function properly, the ambulance service requires core systems which when not available, human life could be endangered. These systems include, Automatic Vehicle Locator (AVL), Mobile Data Terminal (MDT), Government Radio Network (GRN), Call Handling and Dispatching Systems and Electro Medical Equipment. Apart from that, the service requires support systems which smooth out crew operations and facilitate the way things are done. These support systems include Accounting systems, Closed Circuit Television cameras (CCTV) and Ambulance Information Management Solutions System (AIMS). Figure 1 reflects the core and support systems used by SAAS. Group 9 The importance of IT in Ambulances Services 6 Information Security Management MDTTelecommunication s AVL GRN Emergency call services Electro medical Equipments SCADA Account Payable system Payroll system Ambulance AIMS System ePcR system CCTV Figure 1: The South Australian Ambulance Services (Department of Transportation 2007) In Figure 1 above, the systems in red color are core systems and the systems in blue color are support systems. Group 9 The importance of IT in Ambulances Services 7 Information Security Management 2. Core functions The core functions of The South Australia Ambulance service (SAAS) comprises of AVL (Automatic Vehicle Location) System, Electrical Medical Equipment, Government Radio Network (GRN), SACAD system, and Mobile Data Terminal. 2.1 AVL (Automatic Vehicle Location) System System Description Automation vehicle location is a means of determining the geographic location of a vehicle and transmitting the information to a point where it can be used. South Australia Ambulance service (SAA) introduced an Automatic Vehicle Location (AVL) system in SAAS vehicles to improve response efficiencies and resource utilization (White 2010). System Benefits By introducing AVL systems SAAS will be able to perform number of functions: The location of all the ambulance resources can be easily identified at any time; This will provide better information to SAAS and enable a more targeted dispatch of the ambulance resources and thus results in improvement in repose times; AVL systems works with GPS satellites to determine a vehicle’s location, after tracking the ambulance location the information is then transmitted from the receiver inside of the vehicle to its destination. Group 9 The importance of IT in Ambulances Services 8 Information Security Management 2.2 Electrical Medical Equipment In medical locations one of the main considerations is the safety of patients and medical personnel, especially nowadays where there is a wide use of electrical equipment in all aspects of cosmetic or medical treatment, monitoring and diagnosis. This applies not only to hospitals but also numerous other types of medical services like ambulance service. All medical equipment itself must be covered by specific standards and can have parts which require physical or electrical contact with the patient in order for the equipment to function correctly. There are several larger pieces of medical equipment required in ambulance: Portable and fixed suction apparatus with a regulator Portable and fixed oxygen supply equipment capable of metered flow with adequate tubing, portable battery operated defibrillator Pulse oximeter with pediatric and adult probes Blood pressure meter 2.3 Government Radio Network (GRN) South Australian Ambulances Services (SAAS) uses the S.A Government Radio Network (SAGRN) for all metro and most regional communications. From 2003, it has been transitioning from VHF radio network to the SAGRN. Ambulances are now fitted with an MCS 2000 mobile GRN radio and two ATS 2500 portable radios. As part of the transition, in vehicle repeaters will soon be installed to increase portable radio coverage for crews operating in the field. For security issues (availability), VHF radios remain in all vehicles to serve as a backup should the GRN fail. When using the radio, a call is taken by the call taker i n the Group 9 The importance of IT in Ambulances Services 9 Information Security Management communications centre; details are placed into the computer and sent to the dispatch operator who will then find the closest ambulance available and contact them either by radio if they are on the road or GRN pager if they are at an ambulance station. SAGRN paging system is being used extensively by the SA ambulance services for notifying all personnel of tasks. The crew is paged with the category and location of the job and then call up on radio for more information. However, with the introduction of MDTs, they are probably less radio conversations since the crew receives the full case on screen. South Australia at all area emergency services and semi government agencies use GRN, this network has more than 200 radio sites that connect each other to form a data, voice and paging network that cover approximately 96% of the population of South Australia and over than 220,000 sq. kilometres of landmass. The approximately 14,000 mobile voice user, 500 Mobile data terminal and 16,000 paging users link to th e network. By using trunk-tracking capable scanner is allow seeing transmissions on the network from all users around the state. 2.4 Vehicle and Crew Dispatch Australian State Ambulance services provide emergency medical treatment, assistance and transport services to local community members. In an attempt to achieve the best utilization of human and vehicle resources for emergency medical response, the SAAS will be implementing the South Australian Computer Aided Dispatch (SACAD) system in mid-2011 (Creen 2010, pg. 21). SACAD is a Commercial-Off-The-Shelf (COTS) system developed by Intergraph (Wegener, 2011), that will provide SAAS Emergency Medical Dispatch Support Officers (EMDSOs) and Emergency Group 9 The importance of IT in Ambulances Services Medical Dispatchers (EMDs) with 10 Information Security Management ‘recommendation of matching the best resources to an emergency, … inter agency communication and sharing of information across agencies and jurisdictions’ (Marz S 2009) and provide full visibility of an emergency event through use of maps and GPS location tools (Intergraph 2011). 2.5 Call Handling and Dispatching Systems Emergency Operations Centre (EOC) plays a vital role in the South Australian health system as it is often the first point of contact patients have with the ambulance service. This center receives all triple zero calls for emergency ambulance assistance in South Australia. Triple zero (000) is the primary national emergency number in Australia. The emergency Call Service is operated by Telstra corporation Limited and is intended only for use in life – threatening or time critical emergencies (Volunteer Gateway 2011). Calling triple zero connects the caller to a Telstra operator who will then connect the caller to the emergency service organization call taker (EOC in this case). With the caller information transferred upon answering the call, highly trained staff in the Emergency Operations Centre will then query the caller for the relevant details and dispatch an ambulance. The EOC operators handle and organize all transport requests received by South Australian Ambulance Services (SAAS) including emergency, urgent and routine journeys. They also coordinate the use of ambulance resources across the state and manage rescue operations in collaboration with health and emergency service colleagues (Kalika, Arbon& Jones 2010). The EOC operators use the Computer Aided Call Handling system (CACH) for managing calls through the use of computer based algorithms in order to make consistent and objective decisions on actions to be taken thereby, ensuring a consistent service delivery. The computer software can provide scripting, prompts or interactive questioning to assist the call handler in gathering information (enotes 2011). Group 9 The importance of IT in Ambulances Services 11 Information Security Management The call handling software is linked to the Computer Aided Dispatch (CAD), which is a system for dispatching emergency services with the aid of a computer. It can either be used to send messages to the crew via MDT and /or used to store and retrieve data (radio logs, filed interviews, client information, schedules etc.). The CAD system may send text messages with call-for-service details to alphanumeric pagers or wireless telephony text services like SMS; the idea being that a person in the dispatch center will be able to easily view and understand the status of all units being dispatched (Turk 2005). CACH & CAD system (Turk 2005) 2.6 Mobile Data Terminal MDTs are computerized devices used in public transit vehicles including ambulances to communicate with a central dispatch office. They are connected wirelessly to a central computer, usually at the control center. They can function instead of or alongside two way radios as part of the various peripherals that can be connected to them. MDTs are used to pass details of jobs to the crew, and can log the time the crew was mobile to a patient, arrived, and left scene. Ambulance crew update their status on the MDT and this information is fed back to the CAD system thereby, ensuring timely each – way communication with reduced need for voice radio. MDTs are also used to display mapping and information relevant to the tasks and actions performed by the ambulance such as CAD drawings; diagrams and safety information. They receive Group 9 The importance of IT in Ambulances Services 12 Information Security Management full details of cases from the CAD system. Mobile Data Terminal (Google images 2011) 3. Support Functions There are support functions needed in South Australia Ambulance service (SAAS) such as ePCR (Electronic Patient care record) System, AIMS System, Payroll System, Telecommunications, System Emergency Call and Account Payable System. 3.1 ePCR (Electronic Patient care record) System System Description ePCR aims at replacing paper based notes across Australia (Creen 2008). System Benefits Group 9 The importance of IT in Ambulances Services 13 Information Security Management This system has number of benefits with respect to patient, emergency call service agency and the hospital personnel as described below: It has more extensive and detailed documentation which ensures that all the reliable information is stored including the billing description; Well formatted report which increase the readability and understanding; The database complied is quickly available and readily usable by EMS agency for internal quality assurance audits. 3.2 AIMS System (Ambulance Information Management Solutions System) AIMS is a system and services that manage the operations of ambulance companies from dispatch to billing, including crew, fleet, subscriptions and advanced reporting. With AIMS, it will streamline the whole billing and accounts receivable process with time-saving features that make bill transmission, reporting and payment posting efficient. AIMS also record staffs’ personnel and objectively evaluate their performance. Information on call volume, certification status, equipment issued and more is only a click way. AIMS help eliminate surprises related to repair and maintenance of ambulance. Complete records on service history, scheduled maintenance, fuel consumption and equipment repairs make budgeting easier and fleets more reliable. 3.3 Payroll System This system allows the clients to pay the services they used and also used for paid the employee for services they provided during period of time. According to the SA ambulance services there are some way to pay their services such as, over the phone, pay in person, pay by Bpay and mail. Group 9 The importance of IT in Ambulances Services 14 Information Security Management 3.4 Telecommunications Public telecommunication networks play a crucial role in supporting the SAAS CI. Many Direct Support devices rely on these networks, such as mobile telephones, satellite telephones, wireless devices, GPS tracking systems and the new SACAD system. Telstra provide a crucial link between community members in need of emergency help and the SAAS. Telstra provides this link by being the first point of contact for a Triple Zero (000) call and then forwarding the person to the requested emergency service (Stefan 2010). 3.5 Account Payable System The medical equipment’s, security devices etc., that are present in an ambulance are purchased from different vendors hence it is essential to make sure that they have credit to make payments and purchase inventories in a timely manner. All these are possible only with the help of an account payable system. This system is responsible for verifying invoices and requisitions for goods and services, enter data in invoices for payment, list all vendor cheques, maintain the ledger, generate financial reports, maintains a list of accounts payable, backs up data after entry and generates a record of all patient’s transactions. 3.6CCTV In order to provide best, secure services to patients, in addition to the equipment’s that are used for treatment, ambulances are fitted with CCTV. CCTV stands for Closed Circuit Television Camera, which are used to monitor and record images of what is happening in real time. As part of the crime prevention programme the Australian government has taken the initiative to introduce CCTV in many places. Group 9 The importance of IT in Ambulances Services 15 Information Security Management These CCTV’s are used in ambulances to record the activity either inside or outside of the vehicle. This serves as a form of evidence in case of violence against ambulance crew or in some case to prove cases in which the crew is accused of malpractice. 4. Integration All the systems are integrated to each other in some way. With respect to patient the first pint of contact is emergency call system which means dialing 000 for an ambulance. This system is integrated with the SCADA SYSTEM which is a dispatch system and dispatches everything on the bases of nature of call. The electro medical equipmentconsists of all the medical equipment which is critical for the patient. When the vehicle is on its way then all the systems are connected to each other through MDT (mobile data terminals) or Government radio network (GRN). All these activities are being monitored in the CCTV camera. All the support systems are very important for the smooth running of all core functions. Computer Aided Call handling system (CACH) is integrated with the CAD system such that information from (CACH) is passed directly to CAD. This could mean dispatching services which are not part of the ambulance control center can be done automatically like dispatching police to a violent incident, without the requirement to involve a further operator (Wikipedia 2011). The CAD is integrated with MDT to facilitate 2way communication when the ambulance crew update their status via the MDT and receive cases from the CAD system (Turk 2005). The MDT is integrated with the two way radio system. Some of the possible integration of the CAD, MDT and CACH systems are depicted in the diagram below. Group 9 The importance of IT in Ambulances Services 16 Information Security Management Possible elements of CAD system (Wikipedia 2011) 5. Security Call Aided Dispatch system (CAD) information is generally considered confidential for investigative reasons, privacy of victims and witnesses, and in some cases, to comply with state laws. This software provides a flexible method of assigning security levels for all the various types of information, the various CAD functions and all users. This then allows the administrator to specifically assign access permissions to every user, limiting them to what functions they are allowed to perform, and what information they are allowed to see (pro security zone 2011). With the use of MDTs, scanners cannot listen on MDT based digital dialog since radio transmissions are more secure. MDTs uses a secure software application which provides a single logon to back Group 9 The importance of IT in Ambulances Services 17 Information Security Management end systems via the server. The officer’s identification and password is required during the log on process and in some cases a security token will be required for log on operation. The screen can be blacked out by a single key press or automatically after a time period and a personal PIN or password will be required to restore the screen display (pro security zone 2011). 6. REFERENCES White, J. 2010, SA Ambulance services Annual Report 2009-2010. Creen, R. 2008, SA Ambulance services: Defining the road ahead. Department of Transportation 2007, Automatic Vehicle Location Rural Transit. Creen R2010, SA Ambulance Service: Annual Report 2009-10, SA Ambulance Service, viewed 17 August 2011, http://www.saambulance.com.au/LinkClick.aspx?fileticket=hN0LidYBntU%3d&tabid=122 Integraph 2011, Incident Management, Integraph Corporation Part of Hexagon Group, viewed 19 August 2011, http://www.intergraph.com/publicsafety/cad.aspx Marz S. Integraph VP addresses issues facing call takers, 911 centers. [Interview – http://urgentcomm.com/podcast/marz-call-takers-911-center-issues-20090505] with M R Roberts. 5th May 2009. Stefan A 2010, Public Safety and Security: A network-centric approach to community safety in Australia, Telstra Corporation, viewed 19 August 2011, http://www.telstraenterprise.com/SiteCollectionDocuments/Whitepapers/Public%20Safety%20an a%20Security%20white%20paper.pdf Group 9 The importance of IT in Ambulances Services 18 Information Security Management Wegener J. Systems integration with SACAD. [Interview - Verbal] MatrixGroup Head Office, Adelaide with P Campbell. 18th August 2011. Government of South Australia 2009, ‘ SA Government Radio Network’, viewed 20 August 2011, <http://www.sa.gov.au/government/entity/432> South Australian Scan Marketing, ‘SAcan’, Viewed 20 August 2011, <http://www.sascan.net.au/?page=infPages/infAmbulance> Pay my bill 1997, “SA ambulance service’, viewed 20 Ausgust 2011, <http://www.saambulance.com.au/ProductsServices/PayMyBill.aspx> A Handbook for workplaces, ‘Prevention and management of aggression in health services’, December 2009, viewed 19 August 2011, <http://www.commerce.wa.gov.au/worksae/PDF/Guides/Aggression_in_health_web.pdf> Closed Circuit Television (CCTV) in Public Places, ‘NSW Government Policy Statement and Guidelines for the establishment and implementation of CCTV’, viewed 19 August 2011, <http://www.lawlink.nsw.gov.au/lawlink/cpd/ll_cpd.nsf/vwfiles/cctv.pdf/$file/cctv.pdf > Group 9 The importance of IT in Ambulances Services 19 Information Security Management Group 9 The importance of IT in Ambulances Services 20