Evaluasi Keamanan Rekam Medis Elektronik pada Rumah Sakit X

Abstract

Electronic Medical Records (EMR) have become a mandatory component of digital health transformation in Indonesian hospitals, yet their implementation introduces information security risks that directly affect hospital quality management and patient trust. This study aimed to evaluate the security level of the EMR system at X Hospital based on the ISO/IEC 27001:2022 standard and the Indonesian Minister of Health Regulation No. 24 of 2022. A descriptive quantitative method with a Gap Analysis approach was employed, involving 54 respondents from three work units selected through total sampling, using a closed questionnaire adapted from 93 ISO/IEC 27001:2022 security controls, supported by direct observation and documentation review. The results show that overall EMR security reached a good category at 77.3 percent, with an average gap of 22 percent classified as small compared to the ideal standard. The largest gaps were identified in People Controls and the Availability aspect, indicating that human resource management and system continuity planning remain the weakest areas. These findings imply that hospital management should prioritize cybersecurity training, stricter password policies, and the development of disaster recovery and business continuity plans to strengthen EMR security and support compliance with national and international standards.