Analysis on Information Security of Web-Based Data Reporting System of National Maternal and Child Health Surveillance

Abstract

Objective To investigate the fund input, equipments and information security measures for the web-based data reporting system of National Maternal and Child Health Surveillance in health institutions. Methods From January 2009 to December 2011, a total of 546 maternal and child health monitoring agencies which involved in web-based data reporting system of National Maternal and Child Health Surveillance in health institutions were included in the study. Self-filling questionnaire was used to collect data of 503 maternal and child health service institutions involved in national maternal and child health surveillance, particularly on total amount, resources and use of funds, equipments and information security measures taken for web-based data reporting system. Institutions were grouped by administrative level (province, prefecture/city and district/county) and by geographic areas (east, middle and west). The disparities in above mentioned aspects among groups were then evaluated. Results During the period of 2009-2011, a total of 197 million Yuan was invested into the information systems of these institutions, only 16.17% was used for maternal and child health surveillance. Of these institutions, funds raised by themselves, appropriated by supervising authorities and derived from special funds for surveillance accounted for 41.16%, 7.83% and 29.29% respectively. There were 14.51%, 26.84%, 77.14% and 42.94% of institutions without dedicated computer, server, fire wall and UPS equipments. Of them, 9.85% and 9.09% had no antivirus measures for local network and desktop computer. Conclusions Current fund input is insufficient for surveillance units to construct hardware and take protective measures to meet requirements of information security. It is necessary to raise investment through various sources of finance to perfect surveillance system and its information security management system. Key words: maternal and child health surveillance; web-based data reporting system; information security