Publication: Readiness of Information Security Management Systems (ISMS) policy on hospital staff using e-patuh system
Loading...
Date
2018
Authors
Journal Title
Journal ISSN
Volume Title
Publisher
Universiti Teknikal Malaysia Melaka
Abstract
ISO 27001:2013 is the best-known standard providing requirements for information security management systems (ISMS). An ISMS is a systematic approach to manage sensitive information through people, processes and IT systems. In a hospital, a patient's individual medical record is highly private and sensitive. This study performed qualitative questionnaire based on the ISO27001:2013 policy. Seven hospitals in Malaysia were involved in this study. This study focus on the Data Center as it contains a high risk server. This study reveals the non-compliance issues among the sampled hospitals in Malaysia. The participation of the hospitals in trainings related to information security awareness and education were still not adequate due to lack of support from the top management. The Malaysian Administrative Modernisation and Management Planning Unit (MAMPU), the Ministry of Health Malaysia and the top management in hospitals in Malaysia play vital roles to educate and ensure the compliance of ISO 27001:2013. 2018 Universiti Teknikal Malaysia Melaka. All rights reserved.
Description
Keywords
Data Centre, Hospital Information Security Management Systems, ISO 27001:2013, Malaysia
Citation
Ismail, Waidah and Mohd. Alwi, Najwa Haayati and Ismail, Roesnita and Bahari, Mahadi and Zakaria, Omar (2018) Readiness of Information Security Management Systems (ISMS) policy on hospital staff using e-patuh system. Journal of Telecommunication, Electronic and Computer Engineering, 10 (1-11). pp. 47-52. ISSN 2180-1843