The Council for Medical Schemes (CMS) is facing a critical challenge that could have far-reaching implications for the healthcare sector in South Africa. The recent briefing to Parliament's Portfolio Committee on Health has exposed systemic weaknesses in the CMS's Information and Communication Technology (ICT) infrastructure, which are hindering their ability to deliver effective services.
The CMS, a statutory body responsible for regulating medical schemes, has admitted that its outdated IT systems, dating back 20 years, have contributed to a decline in its complaint resolution target from 85% to 75%. This is a significant issue, as it directly impacts the organization's ability to address and resolve complaints from the public, which is a fundamental aspect of regulatory body's role.
The committee, led by Faith Muthambi, has expressed deep concerns about the CMS's preparedness to handle cyber attacks, given the limitations of their ICT platform. This is a critical issue, especially as South African companies and medical aid schemes are increasingly targeted by cyber criminals. The recent data breach incident involving Polmed, a medical scheme serving members of the South African Police Service (SAPS), is a stark reminder of the potential consequences of such vulnerabilities.
The CMS has acknowledged the need for urgent action and has committed to upgrading its IT infrastructure. They are working with the State IT Agency to finalise the procurement process for a new IT platform provider within three months. This is a positive step, but the question remains: why did it take so long to address these issues?
One of the key challenges highlighted by the committee is the CMS's high budget allocation to employees, with approximately 72% of its budget spent on compensation. This raises questions about the organization's efficiency and the potential for overstaffing. The CMS argues that it employs a highly-skilled workforce essential for its regulatory functions, but the committee emphasizes the need for tangible value for money and effective skill transfer to in-house staff.
The CMS's turnaround strategy includes organisational efficiency reviews to ensure staff are fully utilised before filling critical vacancies. This is a positive step towards addressing concerns about potential overstaffing. However, the committee's scrutiny of consultancy services and their impact on the organization's efficiency is a crucial aspect that needs careful attention.
In conclusion, the CMS's ICT infrastructure weaknesses and high budget allocation to employees are significant issues that require immediate attention. The organization must act swiftly to upgrade its IT systems and ensure that its resources are allocated efficiently. The committee's role in holding the CMS accountable and ensuring effective service delivery is crucial, and the public should remain vigilant as these developments unfold.
