You are the CIO for S Health Maintenance Organization.
S provides comprehensive medical services to subscribers
of the HMO, and has been in business for 15 years in California and 10
other states west of the Mississippi.  Sante has a total of 35
hospitals, approximately 250 physicians and 17,000 patients in the
eleven states in which they provide services.  HIPAA requirements are
also impacting the need to track and secure patient information in all
locations, and Sante must report composites (not individual, but group
outcomes of treatments) of health care outcomes information in
electronic form to the government.

Your organization is also charged with reporting outcomes to the
federal government, which requires you to provide consistent
information on patient groups, diseases, treatments, and outcomes. 
This report is required on a quarterly basis in electronic form to the
federal government.  Although this information is “categorized” not
individual patient information, the overall information is proprietary
and extremely sensitive information for the HMO.  Security is a major
concern for any report on individual or groups of patients.

Finally, with the increased growth of Sante, the impact of purchasing
of medical equipment and supplies for all the hospitals has
significant consequences on the bottom line.  Sante has traditionally
made purchases from 5 medical products distributors (in the west). 
These purchases have been traditional purchase order/inventory
stocking processes.  Sante would now like to implement a means of
placing “just-in-time” inventory purchases from all possible
suppliers—with the goal of reducing the cost of medical supplies by
determining the low cost supplier for each purchase and reducing the
cost of carrying inventories at all hospital/clinic locations..

As CIO, you feel that web services provide the best path for
satisfying these needs and keeping open the path for future evolution.

Produce a solution indicating and discussing/justifying your choice
for standards, protocols, dynamic/static binding, security, etc.