Hospital Information System Audit Using The ISO 27001 Standard (Case Study In RSU PKU Muhammadiyah Bantul)

Heri Setiawan, Khurin 'ien Mukhoyyaroh, Muhammad Dzulfikar Fauzi, Bambang Sugiantoro

Abstract


RSU PKU Muhammadiyah Bantul have been using information technology to improve health care in their area. One of the uses of information technology is in medical record information system. The existence of medical record information system will help to manage all medical record data. But with applying information system its data need to be secured, while there still less knowledge and understanding about medical record information system security. Therefore, it’s needed to have an audit using the standard of ISO 27001 to get a convenient security service for a medical record information. The audit of ISO 27001 used because this standard focus at information system security and use as the national standard of Indonesia. This standard contains complete determination to discover information system security. This research managed to give an assessment for medical record information system security of RSU PKU Muhammadiyah Bantul with maturity value of 2,2 (Repeatable but Intuitive). So medical record information system security of RSU PKU Muhammadiyah Bantul is good enough because it’s been followed the information system security procedure. But the hospital management is not paying attention regarding the understanding of their employees about information system security for their medical record information system.

Keywords


Audit System; ISO 27001; Medical Record Information System

Full Text:

PDF

References


Anonym, ISO/ IEC 27001 Information Security Management. Accessed from https://www.iso.org/isoiec-27001-information-security.html.

Iffano, and Sarno, R., Sistem Manajemen Keamanan Informasi. Surabaya: ITS Press, 2009.

R. A. Kusuma, “Audit Keamanan Sistem Informasi dengan Menggunakan Standar SNI ISO 27001 pada Sistem Informasi Akademik Universitas Islam Negeri Sunan Kalijaga Yogyakarta,” UIN Sunan Kalijaga Yogyakarata, 2013.

R. Unggara, “Audit Sistem E-Learning Fakultas Sains Dan Teknologi Uin Sunan Kalijaga Yogyakarta Menggunakan Framework Cobit 4.1,” Universitas Islam Negeri Sunan Kalijaga Yogyakarta, 2013.




DOI: http://dx.doi.org/10.14421/ijid.2014.03105

Refbacks

  • There are currently no refbacks.


Copyright (c) 2019 IJID (International Journal on Informatics for Development)

Creative Commons License
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

 

ISSN: 2252-7834 (print) | 2549-7448 (online)

International Journal on Informatics for Development

Office : Informatics Dept. Faculty of Science and Technology,

State Islamic University (UIN) Sunan Kalijaga,

Yogyakarta-Indonesia

Marsda Adisucipto Street, Yogyakarta

Phone +62-274 519739 Fax. +62-274 540971

Email : ijid@uin-suka.ac.id

Creative Commons License

All publications

by International Journal on Informatics for Development are licensed under a

Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License