The Challenges in Adopting Information Security Management System for University Hospitals in Malaysia

Information Security Management System (ISMS) goal is to provide a comprehensive approach to information security in the organization where timely detection and reporting will improve preventive measures and responses to incidents that could lead to organization good name and minimize financial losses. This paper presents a study on the current awareness of university hospitals on ISMS and the role of management in the decision policy of its implementation. In the literature review explain the importance of ISMS in the industry. The focus of the study is on data protection. Based on the findings, the awareness level is still unsatisfactory and need to improve to protect customers or patients' data. It required the full commitment from the management to implement the ISMS.