{
  "researchCutoff": "2026-11-11",
  "method": "Purposive primary-source review; not a systematic literature review or empirical evaluation.",
  "sources": [
    {
      "name": "Ministry of Health, Singapore. Cybersecurity and Data Security Essentials. Reviewed 11 November 2026.",
      "description": "Account control, health-information access and backup foundations.",
      "reliability": "Primary guidance; relevant sections reviewed; not a provider assessment.",
      "url": "https://isomer-user-content.by.gov.sg/377/57d4f255-0798-43fe-9737-0ea708953cf7/CYBERSECURITY_AND_DATA_SECURITY_ESSENTIALS.pdf"
    },
    {
      "name": "Ministry of Health, Singapore. About Cybersecurity and Data Security. Reviewed 11 November 2026.",
      "description": "HIA framework and the page’s express statement that HIA requirements have yet to take effect.",
      "reliability": "Official page; commencement and applicability must be rechecked at publication.",
      "url": "https://www.healthinfo.gov.sg/csds/"
    },
    {
      "name": "NHS England. (2026). Disaster recovery and business continuity. Infrastructure hosting standards for the NHS.",
      "description": "Comparative connection between recovery objectives and clinical/operational risk.",
      "reliability": "Primary NHS standard for locally hosted infrastructure; not a Singapore requirement.",
      "url": "https://digital.nhs.uk/services/cloud-centre-of-excellence/infrastructure-centre-of-excellence/standards-policy-and-architecture/infrastructure-hosting-standards-for-the-nhs/disaster-recovery-and-business-continuity"
    }
  ]
}