Evaluasi Aspek Keamanan Informasi Rekam Medis Elektronik Pada Sistem Informasi Manajemen Klinik Wirasakti Jember

Suswantari, Melianda (2024) Evaluasi Aspek Keamanan Informasi Rekam Medis Elektronik Pada Sistem Informasi Manajemen Klinik Wirasakti Jember. Undergraduate thesis, Politeknik Negeri Jember.

	Text (Abstract) G41201538 Melianda Suswantari - Abstract.pdf - Submitted Version Available under License Creative Commons Attribution Share Alike. Download (8kB)
	Text (Bab 1 Pendahuluan) G41201538 Melianda Suswantari - Bab 1 Pendahuluan.pdf - Submitted Version Available under License Creative Commons Attribution Share Alike. Download (95kB)
	Text (Daftar Pustaka) G41201538 Melianda Suswantari - Daftar Pustaka.pdf - Submitted Version Available under License Creative Commons Attribution Share Alike. Download (164kB)
	Text (Laporan Lengkap) G41201538 Melianda Suswantari - Laporan Lengkap.pdf - Submitted Version Restricted to Registered users only Download (7MB) | Request a copy

Abstract

The security of electronic medical record (EMR) information in Clinic Wirasakti Jember's management information system is currently vulnerable. This vulnerability arises because patient EMR data input at the registration section was lost due to issues with the clinic's management information system, and user access menus have not been restricted. This situation hampers staff in delivering health services and introduces a risk of information leakage due to unauthorized access to the data. The aim of this research is to evaluate the information security aspects of EMRs in Clinic Wirasakti Jember's management information system. The research is qualitative deductive, meaning the researcher defined the theory at the start. The method used involves input, process, and output, applying the National Academy of Sciences' theory on electronic information security features. The study finds that EMR information in Clinic Wirasakti Jember's management information system is not secure. In terms of authentication, the clinic lacks rules for managing usernames and passwords. For authorization, there are no restrictions on access rights to patient service menus, no provisions for confidential information, and no electronic signatures are implemented. Regarding integrity, the required field feature is inactive, there's no specific antivirus, and there is no history feature. Audit trails are not monitored in log files. Data storage and transmission procedures are absent, and post-disaster recovery provisions are lacking. The recommended improvements include proposing, adding, and activating features and procedures that are not yet available to meet EMR information security standards.

Actions (login required)

View Item