📅 30 November 2025
DOI: 10.51903/00wfhv86
Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems
JUISI : Jurnal Ilmiah Sistem Informasi
Universitas Sains dan Teknologi Komputer
📄 Abstract
This study aims to analyse risk management in hospital medical records information systems using the ISO 31000:2018 framework. Electronic medical records play a critical role in storing and managing sensitive patient data, requiring a structured risk management approach to identify, evaluate, and control potential threats. The research method used was a descriptive qualitative approach, using observation and interviews with information technology staff and medical records managers. The results revealed 11 key risks, divided into three categories: high, medium, and low. High risks were primarily related to the lack of system protection against cyber threats. This study concluded that implementing ISO 31000:2018 can help hospitals develop more effective risk mitigation strategies, thereby supporting the security, integrity, and availability of patient data.
🔖 Keywords
#Risk Management; Electronic Medical Records; ISO 31000:2018; Information Security
ℹ️ Informasi Publikasi
Tanggal Publikasi
30 November 2025
Volume / Nomor / Tahun
Volume 3, Nomor 1, Tahun 2025
📝 HOW TO CITE
Mahfazza, Evva Choirotul ; Amrozi, Yusuf ; Amin, Faris Muslihul , "Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems," JUISI : Jurnal Ilmiah Sistem Informasi, vol. 3, no. 1, Nov. 2025.
ACM
ACS
APA
ABNT
Chicago
Harvard
IEEE
MLA
Turabian
Vancouver
Download Citation
0
Sitasi
Cek Google Scholar