Risk-Based Evaluation of Hospital Management Information System Implementation Using ISO 31000 Framework

Rinno Petra Amzar; Nilo Legowo

doi:10.37641/jimkes.v13i6.4221

Authors

Rinno Petra Amzar Universitas Bina Nusantara, Indonesia
Nilo Legowo Universitas Bina Nusantara, Indonesia

DOI:

https://doi.org/10.37641/jimkes.v13i6.4221

Keywords:

Risk Management, ISO 31000, Hospital Management Information System, SIMRS, Health Information Technology, Risk Assessment, Digital Health Transformation

Abstract

The implementation of a hospital management information system in Indonesian public hospitals brings opportunities for service improvement as well as various risks that must be carefully managed. This study evaluated the implementation of hospital management information system, using the ISO 31000:2018 risk management framework. Using a mixed methods approach, the study identified key risks in the technical, operational, human resources, and infrastructure domains through interviews, field observations, and document analysis. Each risk was analyzed for its likelihood and impact using a quantifiable risk matrix according to the ISO 31000 standard. The evaluation results indicated that system disruptions due to software and network instability, lack of training leading to user errors, and failure of data integration between modules were the most significant risks faced. Several other risks included the threat of cyberattacks on patient data, limited skilled IT personnel, and suboptimal network infrastructure capacity. Recommended mitigation strategies include continuous improvement of user training programs, investment in information technology infrastructure, implementation of stringent cybersecurity protocols, and regular system audits and monitoring. This study produces a practical risk-based evaluation model for the implementation of hospital management information system in regional hospitals, using an internationally recognized risk management framework.

Downloads

Download data is not yet available.

References

Afifawati, N., Khasanah, L., & Giovanni, A. (2023). Interplay of risk management in the multi-disruption era and agency theory insights: A literature review. Jurnal Ilmiah Manajemen Kesatuan, 11(2), 505–512.

Ali, H., Sirat, A. H., & Nurhaida, I. (2025). Implementation of management information systems in monitoring creative economic development. Jurnal Ilmiah Manajemen Kesatuan, 13(1), 233–246.

Alshehri, A., & Hadoussa, S. (2025). Reevaluating the DeLone and McLean model for EHR success and knowledge-sharing in a Saudi public medical complex. Journal of Information Technology Management, 17(2), 28–49.

Basri, W. S., & Ayu, A. L. (2024). Risk management in information systems: Applying ISO 31000: 2018 and ISO/IEC 27001: 2022 controls at PMI’s central clinic. International Journal for Applied Information Management, 4(1), 1–13.

Björnsdottir, S. H., Jensson, P., Thorsteinsson, S. E., Dokas, I. M., & de Boer, R. J. (2022). Benchmarking ISO risk management systems to assess efficacy and help identify hidden organizational risk. Sustainability, 14(9), 4937–4950.

Cita, Y., Miranda, A., Fandani, M., Mahputra, S., Irawan, I. A. F., & Paramarta, V. (2025). Tantangan implementasi SIMRS dari perspektif tenaga kesehatan: Studi kualitatif di rumah sakit daerah [Challenges of SIMRS implementation from the perspective of health personnel: A qualitative study in a regional hospital]. Al-Ihtiram: Multidisciplinary Journal of Counseling and Social Research, 4(1), 121–132.

DeLone, W. H., & McLean, E. R. (2003). The DeLone and McLean model of information systems success: A ten-year update. Journal of Management Information Systems, 19(4), 9–30.

Diaz, A. S. (2025). The influence of the implementation of the hospital management information system (SIMRS) on the effectiveness of patient administration services at Grandmed Hospital Lubuk Pakam. MEDISTRA Medical Journal, 2(2), 72–76.

Efe, A. (2023). A comparison of key risk management frameworks: COSO-ERM, NIST RMF, ISO 31.000, COBIT. Denetim ve Güvence Hizmetleri Dergisi, 3(2), 185–205.

Famila, F., Yudha, G. A. K., Bambulu, G., & Veranita, M. (2025). Transformasi manajemen rumah sakit di era digital: Tinjauan literatur dalam fokus pengembangan sumber daya manusia. Blantika: Multidisciplinary Journal, 3(8), 1120–1132.

Farhan, F. G. R., Indriati, R., & Harini, D. (2025). Evaluasi persepsi pengguna sistem informasi manajemen rumah sakit (SIMRS) pada rawat jalan. Prosiding SEMNAS INOTEK (Seminar Nasional Inovasi Teknologi), 9(2), 961–968.

Fathurohman, A., Setiawan, R., & Darmawan, F. E. (2025). Analisis risiko jaringan komputer untuk meningkatkan kualitas keamanan pada jaringan komputer rumah sakit Universitas Muhammadiyah Semarang. Proceeding of Informatics Collaborations and Dissemination Meeting, 1(1), 45–52.

Febriana, A. A., Wijaya, A., & Budiman, J. A. (2025). Peran komputasi awan dalam meningkatkan efisiensi infrastruktur teknologi informasi di sektor publik. Network: Jurnal Teknologi Informasi, Komunikasi dan Komputer Sains, 1(1), 11–19.

Firdaus, R., Syeira, K., & Wijaya, N. (2025). Transformasi digital sistem informasi kesehatan menuju layanan kesehatan yang terkoneksi dan berpusat pada pasien. Economics and Digital Business Review, 6(2), 1045–1055.

Ginting, R. A. H. (2024). Enterprise risk management (ERM) berbasis ISO 31000 pada risiko operasional rumah sakit: Studi kasus RSUP dr. Wahidin Sudirohusodo Makassar. Makassar: Universitas Hasanuddin.

Gunawan, R. (2024). Efektivitas SIMRS pada INA-CBGS terhadap ketepatan tarif klaim BPJS rawat inap di RSUD X. Journal of Health Analysis Student, 1(2), 67–81.

Hidayat, H. M., Ramdany, R., & Samukri, S. (2022). Analisis faktor-faktor yang mempengaruhi penyerapan anggaran (studi kasus pada lingkungan Kantor Wilayah DJKN DKI Jakarta). Jurnal Akuntansi, 11(1), 51–63.

Hidayatuloh, C., Sedarmayanti, S., & Utoyo, W. (2025). Analisis sistem informasi manajemen rumah sakit (SIMRS) terhadap peningkatan layanan kesehatan dalam mendukung implementasi rekam medis elektronik di era digital. Innovative: Journal of Social Science Research, 5(4), 11285–11303.

Hubbard, D. W. (2020). The failure of risk management: Why it’s broken and how to fix it. Hoboken, NJ: John Wiley & Sons.

Hutagalung, L. E. (2022). Analisa manajemen risiko sistem informasi manajemen rumah sakit (SIMRS) pada Rumah Sakit XYZ menggunakan ISO 31000. Teika, 12(1), 23–33.

Ispas, L., Mironeasa, C., & Silvestri, A. (2023). Risk-based approach in the implementation of integrated management systems: A systematic literature review. Sustainability, 15(13), 10251–10265.

Jasmine, S. T., Matondang, T. S., Pratama, M. R., & Hajijah, S. (2025). Tren, tantangan, dan solusi sistem informasi manajemen rumah sakit di Jakarta. Surya Medika: Jurnal Ilmiah Ilmu Keperawatan dan Ilmu Kesehatan Masyarakat, 20(1), 62–70.

Kartini, A. M., Fadli, S., & Fahmi, H. (2025). The DeLone and McLean model for measuring success hospital management information system case study: Praya Regional Hospital. JISA (Jurnal Informatika dan Sains), 8(1), 66–73.

Lelyana, N., & Sarjito, A. (2025). Application of an information system for inpatient nutrition management: An implementation study based on the Indonesian Minister of Health Regulation No. 26/2013. AcTion: Aceh Nutrition Journal, 10(2), 442–450.

Lutvi, R., Rachmadhani, M. M., Tosofu, A. Z., Mbisikmbo, M., & Supriatna, I. I. (2024). Analisa risiko menggunakan metode likelihood dan consequence risk matriks. Industrial Engineering Journal–System, 2(2), 67–77.

Maharani, L., & Aisah, S. (2024). Peran sistem informasi manajemen dalam meningkatkan efisiensi rumah sakit. Jurnal Sistem Informasi, Akuntansi dan Manajemen, 4(2), 274–283.

Matimbwa, H., & Masue, O. S. (2019). Usage and challenges of human resources information system in the Tanzanian public organizations. Journal of Human Resource Management, 7(4), 131–137.

Mutiarani, R. A. (2023). Digitalisasi pelayanan kesehatan di Indonesia: Peluang dan tantangan. ResearchGate, 1(1), 1–9.

Nasution, T. A., Indradewa, R., Rahmat Syah, T. Y., & Pamungkas, R. A. (2025). Sistem manajemen risiko berbasis ISO 31000: 2018 di RS Khusus Tumbuh Kembang GSH. Cerdika: Jurnal Ilmiah Indonesia, 5(5), 1–10.

Nor, S. R., Indah, D. P., & Heniwati, E. (2024). Internal control analysis of asset management system at Hospital of Tanjungpura University. Jurnal Ilmiah Manajemen Kesatuan, 12(6), 2141–2148.

Nyawira, L., Tsofa, B., Musiega, A., Munywoki, J., Njuguna, R. G., Hanson, K., ... & Barasa, E. (2022). Management of human resources for health: Implications for health systems efficiency in Kenya. BMC Health Services Research, 22(1), 1046–1057.

Permatasari, D. F. (2025). Evaluasi manajemen risiko berdasarkan ISO 31000: 2018 dalam proyek di PT XYZ. Jurnal Locus Penelitian dan Pengabdian, 4(6), 1–10.

Putra, I. P. A. S., & Hendrawan, I. K. R. (2024). Analisis manajemen risiko SIMRS pada Rumah Sakit Ganesha menggunakan ISO 31000. Jurnal Teknologi dan Informasi, 14(1), 88–98.

Putri, D. N., Purba, S. H., Layana, K., & Lubis, K. (2025). Tantangan dan solusi dalam implementasi SIMRS di rumah sakit pemerintah di Indonesia. Jurnal Riset Ilmu Kesehatan Umum dan Farmasi, 3(1), 13–22.

Riyadi, A., & Ratnasari, V. (2025). Risk assessment and mitigation in workplace safety at energy distribution company PT XYZ. Jurnal Ilmiah Manajemen Kesatuan, 13(1), 209–220.

Selvaseelan, J. (2018). Development and introduction of the risk-sentience auxiliary framework (RSAF) as an enabler to the ISO 31000 and ISO 31010 for high-risk environments. Administrative Sciences, 8(2), 22–35.

Setiawan, T., & Wijayati, N. (2024). Evaluation of risk management for optimizing service quality in XYZ regional general hospital. International Journal of Financial, Accounting, and Management, 6(2), 301–312.

Sinulingga, N. E., Kep, M., & Kep, S. (2025). Manajemen rumah sakit. Jakarta: Gita Lentera.

Suarmanayasa, I. N., Pramesworo, I. S., Masela, A., Sucipto, B., & Launtu, A. (2024). Risk management strategies in the financial industry: Theoretical review and practical implications. Jurnal Ilmiah Manajemen Kesatuan, 12(4), 995–1004.

Supriyadi, F., Eliandi, S., & Absharina, E. D. (2025). Literatur singkat: Efisiensi dalam sistem informasi manajemen rumah sakit. Jurnal Cakrawala Akademika, 2(1), 924–942.

Windarti, S., & Nadya, A. (2023). Implementasi sistem informasi manajemen rumah sakit (SIMRS). Yogyakarta: Penerbit NEM.