Readiness of Information Security Management Systems (ISMS) Policy on Hospital Staff Using e-Patuh System

Authors

  • Waidah Ismail Faculty of Science and Technology, Universiti Sains Islam Malaysia (USIM), Negeri Sembilan,Malaysia.
  • Najwa Haayati Mohd Alwi Faculty of Science and Technology, Universiti Sains Islam Malaysia (USIM), Negeri Sembilan,Malaysia.
  • Roesnita Ismail Faculty of Science and Technology, Universiti Sains Islam Malaysia (USIM), Negeri Sembilan,Malaysia.
  • Mahadi Bahari Faculty of Computing, Universiti Teknologi Malaysia (UTM), Johor, Malaysia.
  • Omar Zakaria Pusat Pengajian Siswazah, Universiti Pertahanan Nasional Malaysia (UPNM), Kuala Lumpur, Malaysia.

Keywords:

Data Centre, Hospital Information Security Management Systems, ISO 27001, 2013, Malaysia,

Abstract

ISO 27001:2013 is the best-known standard providing requirements for information security management systems (ISMS). An ISMS is a systematic approach to manage sensitive information through people, processes and IT systems. In a hospital, a patient's individual medical record is highly private and sensitive. This study performed qualitative questionnaire based on the ISO27001:2013 policy. Seven hospitals in Malaysia were involved in this study. This study focus on the Data Center as it contains a high risk server. This study reveals the non-compliance issues among the sampled hospitals in Malaysia. The participation of the hospitals in trainings related to information security awareness and education were still not adequate due to lack of support from the top management. The Malaysian Administrative Modernisation and Management Planning Unit (MAMPU), the Ministry of Health Malaysia and the top management in hospitals in Malaysia play vital roles to educate and ensure the compliance of ISO 27001:2013.

Downloads

Published

2018-02-26

How to Cite

Ismail, W., Mohd Alwi, N. H., Ismail, R., Bahari, M., & Zakaria, O. (2018). Readiness of Information Security Management Systems (ISMS) Policy on Hospital Staff Using e-Patuh System. Journal of Telecommunication, Electronic and Computer Engineering (JTEC), 10(1-11), 47–52. Retrieved from https://jtec.utem.edu.my/jtec/article/view/3848

Issue

Vol. 10 No. 1-11: Fostering National Development Through Science and Technology II

Section

Articles

License

TRANSFER OF COPYRIGHT AGREEMENT

The manuscript is herewith submitted for publication in the Journal of Telecommunication, Electronic and Computer Engineering (JTEC). It has not been published before, and it is not under consideration for publication in any other journals. It contains no material that is scandalous, obscene, libelous or otherwise contrary to law. When the manuscript is accepted for publication, I, as the author, hereby agree to transfer to JTEC, all rights including those pertaining to electronic forms and transmissions, under existing copyright laws, except for the following, which the author(s) specifically retain(s):

  1. All proprietary right other than copyright, such as patent rights
  2. The right to make further copies of all or part of the published article for my use in classroom teaching
  3. The right to reuse all or part of this manuscript in a compilation of my own works or in a textbook of which I am the author; and
  4. The right to make copies of the published work for internal distribution within the institution that employs me

I agree that copies made under these circumstances will continue to carry the copyright notice that appears in the original published work. I agree to inform my co-authors, if any, of the above terms. I certify that I have obtained written permission for the use of text, tables, and/or illustrations from any copyrighted source(s), and I agree to supply such written permission(s) to JTEC upon request.


Most read articles by the same author(s)