Evaluasi Aspek Keamanan dan Kerahasiaan Rekam Medis Elektronik (RME) Berdasarkan Cyber Security di Rumah Sakit Jiwa Dr.Soeharto Heerdjan

Ferlia Sintiana Dewi; Bangga Agung Satrya; Nanda Aula Rumana; Laela Indawati; Nurhidayatuloh Nurhidayatuloh

doi:10.62027/vitamedica.v4i4.892

Authors

Ferlia Sintiana Dewi Universitas Esa Unggul
Bangga Agung Satrya Universitas Esa Unggul
Nanda Aula Rumana Universitas Esa Unggul
Laela Indawati Universitas Esa Unggul
Nurhidayatuloh Nurhidayatuloh Rumah Sakit Jiwa DR.Soeharto Heerdjan

DOI:

https://doi.org/10.62027/vitamedica.v4i4.892

Keywords:

Cyber Threats, Cybersecurity, Data Confidentiality, Data Security, Electronic Medical Records

Abstract

Hospitals implementing Electronic Medical Records (EMR) must ensure patient data security and confidentiality based on cybersecurity principles to prevent data breaches and misuse. EMR at Dr. Soeharto Heerdjan Mental Hospital has been implemented since 2019, but security issues remain, including shared login credentials and low cybersecurity awareness, which may compromise sensitive mental health data. This study aims to describe EMR security and confidentiality based on cybersecurity principles and analyze related threats and risks. A descriptive qualitative method was employed through in-depth interviews, observations, and document analysis involving medical record officers, IT staff, and nurses. Data were analyzed using the Miles and Huberman model. The results show that all seven security and confidentiality aspects have been implemented, but confidentiality, authentication, and non-repudiation remain weak due to simple passwords, shared logins, and the absence of Multi-Factor Authentication (MFA). Cybersecurity measures include firewalls, data encryption, and backup/recovery, although security log monitoring and recovery testing are not routine. The main threat is insider threats, followed by malware, phishing, and network disruptions. Strengthening layered authentication, regular security evaluations, and cybersecurity awareness is recommended.

References

Ahmad, A., Hastuti, J., Hijriatin, M., & Sarno, S. (2025). Data security analysis in electronic health information systems. Journal Informatic, Education and Management (JIEM), 7(1), 1–11. https://doi.org/10.61992/jiem.v7i1.107

Ariani Suci. (2023). Analisis keberhasilan implementasi rekam medis elektronik dalam meningkatkan efisiensi dan mutu pelayanan. Analisis Keberhasilan Implementasi Rekam Medis Elektronik dalam Meningkatkan Efisiensi dan Mutu Pelayanan, 2(2), 7–14.

Herdadi, A. (2024). Analisis keamanan siber pada implementasi sistem informasi rekam medis OpenEMR V7.0.2. Jurnal Nasional Komputasi dan Teknologi Informasi (JNKTI), 7(4), 824–833. https://doi.org/10.32672/jnkti.v7i4.7887

Hutauruk, P. M., & Astuti, W. T. (2018). Tinjauan aspek keamanan dan kerahasiaan dokumen rekam medis di ruang filling Rumah Sakit Khusus (RSK) Paru Medan tahun 2018. Jurnal Ilmiah Perekam dan Informasi Kesehatan Imelda, 3(2), 510–518.

Kementerian Kesehatan Republik Indonesia. (2022). Peraturan Menteri Kesehatan Republik Indonesia Nomor 24 Tahun 2022 tentang Rekam Medis.

Mahendra, A. R., Siswati, Sonia, D., & Iqbal, M. F. (2025). Tinjauan sistem keamanan rekam medis elektronik di Rumah Sakit Al Dr. Mintohardjo Jakarta. VitaMedica: Jurnal Rumpun Kesehatan Umum, 3, 75–90.

Min-Fang, T., Shin-Yuan, H., Wen-Ju, Y., C. C., C., & C., Y. D. (2019). Understanding physicians’ adoption of electronic medical records: Healthcare technology self-efficacy, service level and risk perspectives. Computer Standards & Interfaces, 66, 1–11. https://doi.org/10.1016/j.csi.2019.04.001

Nugroho, M. R. P., & Kurniadi, A. (2022). Tinjauan tata kelola keamanan RME berdasarkan prinsip keamanan PMK No. 24 Tahun 2022 di RSUD Dr. H. Soewondo Kendal. Manajemen Informasi Kesehatan Indonesia, 13(1), 25–33.

Ramadhani, T. A., Cobantroro, A. F., & Sugianti. (2024). Implementasi algoritma Advanced Encryption Standard 128 untuk pengamanan database sistem. Jurnal Informatika Polinema, 10, 521–526.

Rani, D. M., Widyaningrum, B. N., & Rizqulloh, L. (2024). Edukasi mengenai aspek keamanan informasi data pasien pada penerapan RME di RSI Sultan Agung. PAKDEMAS: Jurnal Pengabdian Kepada Masyarakat, 115–120. https://jurnal.faperta-unras.ac.id/index.php/pakdemas/article/view/328

Republik Indonesia. (2023). Undang-Undang Republik Indonesia Nomor 17 Tahun 2023 tentang Kesehatan.

Setyaningrum, E., & Ricky, A. V. (2025). Analisis keamanan data pasien dalam rekam medis elektronik berdasarkan CIA Triad di RSUD X Jawa Tengah. Jurnal Ners, 9(3), 4216–4221. https://doi.org/10.31004/jn.v9i3.46352

Suhariyono, U. S., Ikawati, F. R., & Afifah, N. (2025). Analisis aspek keamanan informasi data pasien pada rekam medis elektronik di UPT Puskesmas Karangploso. Jurnal Manajemen Informasi Kesehatan Indonesia, 13(1), 2337–2585.

Tiorentap, D. R. A., & Hosizah, H. (2020). Aspek keamanan informasi dalam penerapan rekam medis elektronik di Klinik Medical Check-Up MP. SENWODIPA, 53–66.

Wardani, E., Putra, D. H., Sonia, D., Yulia, N., & Abstrak, K. K. (2024). Keamanan sistem informasi rekam medis elektronik di Rumah Sakit Islam Jakarta Sukapura. Jurnal Rekam Medik dan Manajemen Informasi Kesehatan, 3(2), 2829–4777.

We’e, A., Nugroho, R. H., & Siswatibudi, H. (2023). Evaluasi aspek keamanan dan kerahasiaan rekam medis elektronik di Rumah Sakit Panti Nugroho. Jurnal Permata Indonesia, 14(2), 72–81. https://doi.org/10.59737/jpi.v14i2.265

Wirajaya, M. K. M., & Dewi, N. M. U. K. (2020). Analisis kesiapan Rumah Sakit Dharma Kerti Tabanan menerapkan rekam medis elektronik. Jurnal Kesehatan Vokasional, 5(1), 1. https://doi.org/10.22146/jkesvo.53017