Ismail W.Alwi N.H.M.Ismail R.Bahari M.Zakaria O.2024-05-282024-05-282018Ismail, Waidah and Mohd. Alwi, Najwa Haayati and Ismail, Roesnita and Bahari, Mahadi and Zakaria, Omar (2018) Readiness of Information Security Management Systems (ISMS) policy on hospital staff using e-patuh system. Journal of Telecommunication, Electronic and Computer Engineering, 10 (1-11). pp. 47-52. ISSN 2180-1843218018432-s2.0-85046451606https://www.scopus.com/inward/record.uri?eid=2-s2.0-85046451606&partnerID=40&md5=08e7b18664f7c532c03db1afe5fe9e3ehttps://oarep.usim.edu.my/handle/123456789/9287ISO 27001:2013 is the best-known standard providing requirements for information security management systems (ISMS). An ISMS is a systematic approach to manage sensitive information through people, processes and IT systems. In a hospital, a patient's individual medical record is highly private and sensitive. This study performed qualitative questionnaire based on the ISO27001:2013 policy. Seven hospitals in Malaysia were involved in this study. This study focus on the Data Center as it contains a high risk server. This study reveals the non-compliance issues among the sampled hospitals in Malaysia. The participation of the hospitals in trainings related to information security awareness and education were still not adequate due to lack of support from the top management. The Malaysian Administrative Modernisation and Management Planning Unit (MAMPU), the Ministry of Health Malaysia and the top management in hospitals in Malaysia play vital roles to educate and ensure the compliance of ISO 27001:2013. 2018 Universiti Teknikal Malaysia Melaka. All rights reserved.en-USData CentreHospital Information Security Management SystemsISO 27001:2013MalaysiaArticle47521044136