Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems

Mahfazza ; Evva Choirotul ; Amrozi ; Yusuf ; Amin ; Faris Muslihul
JUISI : Jurnal Ilmiah Sistem Informasi 📅 2025 Vol 4, No 3 🔗 DOI: 10.51903/00wfhv86
Abstract
This study aims to analyse risk management in hospital medical records information systems using the ISO 31000:2018 framework. Electronic medical records play a critical role in storing and managing sensitive patient data, requiring a structured risk management approach to identify, evaluate, and control potential threats. The research method used was a descriptive qualitative approach, using observation and interviews with information technology staff and medical records managers. The results revealed 11 key risks, divided into three categories: high, medium, and low. High risks were primarily related to the lack of system protection against cyber threats. This study concluded that implementing ISO 31000:2018 can help hospitals develop more effective risk mitigation strategies, thereby supporting the security, integrity, and availability of patient data.
Keywords
Risk Management; Electronic Medical Records; ISO 31000:2018; Information Security
How to Cite

Mahfazza, et al. (2025). Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems. JUISI : Jurnal Ilmiah Sistem Informasi, 4(3). https://doi.org/10.51903/00wfhv86

Mahfazza, Evva Choirotul ; Amrozi, Yusuf ; Amin, Faris Muslihul , "Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems," JUISI : Jurnal Ilmiah Sistem Informasi, vol. 4, no. 3, 2025.

Mahfazza, Evva Choirotul ; Amrozi, Yusuf ; Amin, Faris Muslihul . "Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems." JUISI : Jurnal Ilmiah Sistem Informasi, vol. 4, no. 3, 2025.

Mahfazza, Evva Choirotul ; Amrozi, Yusuf ; Amin, Faris Muslihul . "Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems." JUISI : Jurnal Ilmiah Sistem Informasi 4, no. 3 (2025).

Mahfazza, et al. (2025) 'Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems', JUISI : Jurnal Ilmiah Sistem Informasi, 4(3). doi: 10.51903/00wfhv86.

Mahfazza, Evva Choirotul ; Amrozi, Yusuf ; Amin, Faris Muslihul . Enhancing Information Security and Risk Governance in Hospital Electronic Medical Record Systems. JUISI : Jurnal Ilmiah Sistem Informasi. 2025;4(3).

Artikel Terkait

Design and Implementation of a Web-Based QR Code Employee Attendance System for Optimizing Attendance Management: A Case Study at Bento and Es Teh Luwes Ungaran

Nufninu, Novinda Grezen; Rudjiono, Rudjiono; Panjaitan, Cherlina Helena Purnamasari ; Nufninu, Novinda Grezen; Rudjiono, Rudjiono; Panjaitan, Cherlina Helena Purnamasari

UI/UX Design of a Mobile Application for Shoe Cleaning Service Management Using the Design Thinking Method (Case Study: OurShoes)

Cahyani, Clariesta Eka Nanda ; Voutama, Apriade ; Cahyani, Clariesta Eka Nanda ; Voutama, Apriade

Analisis Perbandingan Yolov11 dan MobileNetV3 untuk Klasifikasi Varietas Padi

Octaviansyah, Ade ; Sari, Herva Emilda; Raharjo, Teguh; Octaviansyah, Ade; Sari, Herva Emilda ; Raharjo, Teguh

Audit of Incident Management on the LinkedIn Platform Based on User Perception Using COBIT 5

Marsiah, Siti; Sulistiyowati, Nina ; Voutama, Apriade ; Marsiah, Siti; Sulistiyowati, Nina ; Voutama, Apriade

Deteksi Aktivitas Vape Berbasis Yolov8 pada Citra dan Video dengan Pendekatan Deep Learning

Lahuddin, Lahuddin; Larasati, Pamela ; Hasbi, Abdilah; Lahuddin, Lahuddin; Larasati, Pamela ; Hasbi, Abdilah

Sentiment Analysis of Indomaret Poinku Using Lexicon-Based Labeling with KNN and Random Forest Algorithms

Sulaeni, Dini ; Purnamasari, Ade Irma ; Ali, Irfan ; Kurniawan, Rudi ; Nurdiawan, Odi ; Sulaeni, Dini ; Purnamasari, Ade Irma ; Ali, Irfan ; Kurniawan, Rudi ; Nurdiawan, Odi

Tren Sitasi Jurnal