Universiti Teknologi Malaysia Institutional Repository

Readiness of Information Security Management Systems (ISMS) policy on hospital staff using e-patuh system

Ismail, Waidah and Mohd. Alwi, Najwa Haayati and Ismail, Roesnita and Bahari, Mahadi and Zakaria, Omar (2018) Readiness of Information Security Management Systems (ISMS) policy on hospital staff using e-patuh system. Journal of Telecommunication, Electronic and Computer Engineering, 10 (1-11). pp. 47-52. ISSN 2180-1843

Full text not available from this repository.

Official URL: https://journal.utem.edu.my/index.php/jtec/article...

Abstract

ISO 27001:2013 is the best-known standard providing requirements for information security management systems (ISMS). An ISMS is a systematic approach to manage sensitive information through people, processes and IT systems. In a hospital, a patient's individual medical record is highly private and sensitive. This study performed qualitative questionnaire based on the ISO27001:2013 policy. Seven hospitals in Malaysia were involved in this study. This study focus on the Data Center as it contains a high risk server. This study reveals the non-compliance issues among the sampled hospitals in Malaysia. The participation of the hospitals in trainings related to information security awareness and education were still not adequate due to lack of support from the top management. The Malaysian Administrative Modernisation and Management Planning Unit (MAMPU), the Ministry of Health Malaysia and the top management in hospitals in Malaysia play vital roles to educate and ensure the compliance of ISO 27001:2013.

Item Type:Article
Uncontrolled Keywords:Data Centre, ISO 27001:2013
Subjects:Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:Computing
ID Code:85155
Deposited By: Widya Wahid
Deposited On:04 Mar 2020 01:32
Last Modified:04 Mar 2020 01:32

Repository Staff Only: item control page