Abstract:A hospital's operations, such as patient registration, medical management, financial management, and upgrading the services offered in the hospital, are managed and organized using an application system called a hospital management information system (HMIS). Because the lack of evaluation in the usage of HMIS has led to insufficient security in the HMIS, this research focuses on Saraswati Dental and Oral Hospital as the research site. Due to lax security measures, confidential data is readily accessible. The prevalence of duplicate data entry is an issue, and the success of HMIS performance implementation is still unknown. The COBIT 5 framework has been used to administer the HMIS at Saraswati Dental and Oral Hospital using the MEA (Monitor, Evaluate, Assess) and BAI (Build, Acquire, Implement) domains in response to these problems. This decision was made with the intention of aligning the application with the necessary features, monitoring system security, evaluating, and assessing the domain's alignment with the hospital's strategy in order to ascertain whether the current system still achieves the intended goals and maintains the controls required to satisfy the requirements. This study makes use of questionnaire, observation, and interview techniques. The capacity levels used in the COBIT 5 study were taken from ISO/IEC 15504-2-2003, and they were combined using straightforward mathematical calculations in accordance with the rules for computing capability values. Weaknesses or flaws in the security system that need to be fixed can be found by analyzing the capability levels in the MEA and BAI domains. The study's findings include suggestions for increasing the security system, which will enhance Saraswati Dental and Oral Hospital's HMIS performance and give users and patients with more beneficial outcomes

Assessment of Information Security Management System: A Case Study of Data Recovery Center in Ministry XYZ

Assessing the Information Security Awareness of Employees in PT ABC Against International Organization for Standardization (ISO) 27001:2013

Performance Measurement of Security Academic Information System using Maturity Level

IT Maturity Level Analysis Using Framework COBIT 5 Work for Management Cyber Incident: Case Study of Company Z in ICT Field

Analysis of factors that inhibiting implementation of Information Security Management System (ISMS) based on ISO 27001

Analisis Risiko Proyek Pengembangan Perangkat Lunak Menggunakan Kerangka Kerja ISO 31000

Information Security Analysis of Online Education Management System using Information Technology Infrastructure Library Version 3

A Novel Method on ISO 27001 Reviews: ISMS Compliance Readiness Level Measurement

Developing a Risk Analysis Strategy Framework for Impact Assessment in Information Security Management Systems: A Case Study in IT Consulting Industry

The ISO/IEC 27001 Information Security Management Standard: How to Extract Value from Data in the IT Sector

Information security analysis on physical security in university x using maturity model

Evaluation of an information security management system at a Mexican higher education institution

Manajemen Risiko Divisi Sistem Informasi Perguruan Tinggi Dengan Framework COBIT 5

Information Security Risks Assessment: A Case Study

Information security investment prioritization using best-worst method for small and medium enterprises

Security Audit on Loan Debit Network Corporation System Using Cobit 5 and ISO 27001: 2013

Integrated Solution Modeling Software: A New Paradigm on Information Security Review and Assessment

Audit Manajemen Risiko Sistem Informasi pada Website Digo.id dengan Framework COBIT 5 dan ISO 31000

Assessment of the Practices of Internal Control System in the Public Sectors of Malaysia

Analysis of Hospital management information systems using cobit 5 framework case study "Saraswati Dental and Oral Hospital in Denpasar”

A Hierarchical Framework of Security Situation Assessment for Information System