Ismail, Waidah and Mohd. Alwi, Najwa Haayati and Ismail, Roesnita and Bahari, Mahadi and Zakaria, Omar (2018) Readiness of Information Security Management Systems (ISMS) policy on hospital staff using e-patuh system. Journal of Telecommunication, Electronic and Computer Engineering, 10 (1-11). pp. 47-52. ISSN 2180-1843
Full text not available from this repository.
Official URL: https://journal.utem.edu.my/index.php/jtec/article...
Abstract
ISO 27001:2013 is the best-known standard providing requirements for information security management systems (ISMS). An ISMS is a systematic approach to manage sensitive information through people, processes and IT systems. In a hospital, a patient's individual medical record is highly private and sensitive. This study performed qualitative questionnaire based on the ISO27001:2013 policy. Seven hospitals in Malaysia were involved in this study. This study focus on the Data Center as it contains a high risk server. This study reveals the non-compliance issues among the sampled hospitals in Malaysia. The participation of the hospitals in trainings related to information security awareness and education were still not adequate due to lack of support from the top management. The Malaysian Administrative Modernisation and Management Planning Unit (MAMPU), the Ministry of Health Malaysia and the top management in hospitals in Malaysia play vital roles to educate and ensure the compliance of ISO 27001:2013.
Item Type: | Article |
---|---|
Uncontrolled Keywords: | Data Centre, ISO 27001:2013 |
Subjects: | Q Science > QA Mathematics > QA75 Electronic computers. Computer science |
Divisions: | Computing |
ID Code: | 85155 |
Deposited By: | Widya Wahid |
Deposited On: | 04 Mar 2020 01:32 |
Last Modified: | 04 Mar 2020 01:32 |
Repository Staff Only: item control page