Evaluasi Keamanan Sistem Informasi Rumah Sakit: Metode Pengujian ISO 27001 di RS Khusus Mata Purwokerto
Main Article Content
Abstract
Article Summary
As service quality becomes paramount, ICT governance is increasingly important for organizations. This study will audit Purwokerto Eye Specialty Hospital's SIMRS against ISO/IEC 27001 standards to evaluate its information security posture. The implemented Hospital Management Information System (SIMRS) aims to support the integration of services and administrative processes, but faces various security challenges such as data loss and potential manipulation. The audit was conducted through observation, interviews, and analysis of existing security policies. The audit results show that information security incident management is in accordance with procedures, including handling, reporting, and corrective actions, with a fairly high level of security maturity. The study recommends periodic evaluation and security enhancements to ensure system resilience against future threats.
Keywords
Article Keywords
Downloads
Article Details

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License (CC-BY 4.0) that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work.
Fauzi, A. A., Kom, S., Kom, M., Budi Harto, S. E., Mm, P. I. A., Mulyanto, M. E., ... & Rindi Wulandari, S. (2023). Pemanfaatan Teknologi Informasi di Berbagai Sektor Pada Masa Society 5.0. PT. Sonpedia Publishing Indonesia.
Handiwidjojo, W. (2015). Sistem informasi manajemen rumah sakit. Jurnal Eksplorasi Karya Sistem Informasi dan Sains, 2(2).
Hariana, E., Sanjaya, G. Y., Rahmanti, A. R., Murtiningsih, B., & Nugroho, E. (2013). Penggunaan sistem Informasi manajemen rumah sakit (SIMRS) di DIY. SESINDO 2013, 2013.
Igiany, P. D. (2019, December). Systematic Review: Faktor yang Mempengaruhi Implementasi Sistem Informasi Manajemen Rumah Sakit (SIMRS). In Prosiding Seminar Nasional INAHCO 2019 (Vol. 1).
Ikhwan, A., & Yuniana, A. N. (2022). Strategy management semi-islamic boarding schools. Al-Hayat: Journal of Islamic Education, 6(1), 74-86. https://doi.org/10.35723/ajie.v6i1.222.
Komalawati, V., & Triswandi, E. F. (2022). Tanggung Jawab Dokter Atas Insiden Keselamatan Pasien Dalam Pelayanan Kesehatan Di Rumah Sakit Sebagai Institusi Kesehatan. Jurnal Bina Mulia Hukum, 6(2), 174-186. https://doi.org/10.23920/jbmh.v6i2.687.
Lubis, N. S., & Nasution, M. I. P. (2023). Perkembangan Teknologi Informasi Dan Dampaknya Pada Masyarakat. Kohesi: Jurnal Sains dan Teknologi, 1(12), 41-50. https://doi.org/10.3785/kohesi.v1i12.1311.
Pamungkas, W. C., & Saputra, F. T. (2020). Evaluasi Keamanan Informasi Pada SMA N 1 Sentolo Berdasarkan Indeks Keamanan Informasi (KAMI) ISO/IEC 27001: 2013. Jurnal Sistem Komputer dan Informatika (JSON), 1(2), 101-106.
Paramita, S., Siregar, S. A., Damanik, R. A., & Irawan, M. D. (2022). Analisis Manejemen Resiko Keamanan Data Sistem Informasi Berdasarkan Indeks Keamanan Informasi (KAMI) ISO 27001: 2013. Bulletin of Information Technology (BIT), 3(4), 374-379. https://doi.org/10.47065/bit.v3i4.421.
Pertiwi, T. P., Pangestuti, D. D., Febrian, W. D., Nove, A. H., Megavitry, R., & Imanirubiarko, S. (2024). Strategi Pengembangan Kompetensi Dosen Untuk Menanggapi Tantangan Pendidikan Abad Ke-21. Jurnal Review Pendidikan Dan Pengajaran (JRPP), 7(1), 2586-2596. https://doi.org/10.31004/jrpp.v7i1.25779.
Premana, A., Fitralisma, G., Yulianto, A., Zaman, M. B., & Wiryo, M. A. (2020). Pemanfaatan teknologi informasi pada pertumbuhan ekonomi dalam era disrupsi 4.0. Journal of Economic and Management (JECMA), 2(2), 1-6. https://doi.org/10.46772/jecma.v1i01.219.
Riana, E., Sulistyawati, M. E. S., & Putra, O. P. (2023). Analisis Tingkat Kematangan (Maturity Level) Dan PDCA (Plan-Do-Check-Act) Dalam Penerapan Audit Sistem Manajemen Keamanan Informasi Pada PT Indonesia Game Menggunakan Metode ISO 27001: 2013. Journal of Information System Research (JOSH), 4(2), 632-640. https://doi.org/10.47065/josh.v4i2.2552.
Setyawan, D. (2016). Analisis Implementasi Pemanfaatan Sistem Informasi Manajemen Rumah Sakit (Simrs) Pada Rsud Kardinah Tegal. IJCIT (Indonesian Journal on Computer and Information Technology), 1(2). https://doi.org/10.31294/ijcit.v1i2.1503.
Simatupang, J., & Sianturi, S. (2019). Perancangan sistem informasi pemesanan tiket bus pada po. Handoyo berbasis online. Jurnal Intra-Tech, 3(2), 11-25.
Sundari, P., & Wella, W. (2021). SNI ISO/IEC 27001 dan Indeks KAMI: Manajemen Risiko PUSDATIN (PUPR). Ultima InfoSys: Jurnal Ilmu Sistem Informasi, 12(1), 35-42. https://doi.org/10.31937/si.v12i1.1701.