Evaluasi Pengendalian Internal pada Rekam Medis Elektronik Rumah Sakit Hermina Pasteur menggunakan COSO Internal Control Integrated Framework dan COBIT 2019 Maturity Model
DOI:
https://doi.org/10.37481/jmeb.v6i1.1818Keywords:
Electronic Health Records, Internal Control, COSO, COBIT 2019, Hospital GovernanceAbstract
The growing reliance on Electronic Health Records (EHR) in Indonesian hospitals raises concerns over data security, especially after recent national incidents highlighting vulnerabilities in public information systems. Hermina Pasteur Hospital, as part of a digitally integrated hospital network, must ensure that its internal controls adequately protect patient data and support reliable service delivery. This study aims to evaluate the effectiveness of internal controls governing the hospital’s EHR using the COSO Internal Control Integrated Framework and the COBIT 2019 Maturity Model. A sequential explanatory mixed-methods design was applied, combining quantitative assessments through a COSO-based questionnaire with qualitative insights from observations and interviews with key personnel. The integration of both approaches allowed for a more grounded interpretation of control practices and their implementation. The findings show that the hospital’s EHR controls are at the “Managed” maturity level, where several procedures are in place but not yet fully standardized or consistently documented. Strengths were observed in risk assessment, whereas weaknesses appeared mainly in control activities and accountability practices. These results indicate that improvements in control environment, documentation practices, and monitoring mechanisms are necessary to strengthen the overall reliability of EHR governance.
References
Amoako, G. K. (2016). Corporate governance and records management in private and public hospitals in Ghana. Records Management Journal, 26(1), 74-91.
Asih, H. A., & Indrayadi, I. (2023). Perkembangan rekam medis elektronik di Indonesia: Literature review. Jurnal Promotif Preventif, 6(1), 15-26.
Astuti, P., Maghfiroh, S., & Ramadhanti, W. R. (2023). Sistem pengendalian internal berbasis COSO untuk pencegahan fraud di rumah sakit Muhammadiyah/Aisyiyah. Fair Value: Jurnal Ilmiah Akuntansi dan Keuangan, 5(1), 105-118.
Bevan, S. J., Hamidreza, R., & Alam, M. (2023). Evaluating healthcare information systems: A multi-layer governance approach. Health Informatics Journal, 29(1), 1-14.
Braun, V., & Clarke, V. (2021). One size fits all? What counts as quality practice in qualitative research. Qualitative Research in Psychology, 18(3), 328-352.
Coffey, P. S., Postal, S., Houston, S. M., & McKeeby, J. W. (2016). Lessons learned from an electronic health record downtime. Perspectives in Health Information Management, Summer, 1-7.
Creswell, J. W., & Creswell, J. D. (2023). Research design: Qualitative, quantitative, and mixed methods approaches (6th ed.). Sage.
Edi, E., & Felicia, F. (2022). Analisis pengaruh tata kelola perusahaan terhadap kinerja perusahaan yang terdaftar di Bursa Efek Indonesia periode 2016-2020. Jesya: Jurnal Ekonomi & Ekonomi Syariah, 5(1), 613-624.
Firdaus, N., & Kusumaningtias, R. (2021). Perancangan sistem informasi akuntansi pada LAZIS Nurul Falah. Jurnal Ekonomi Akuntansi dan Manajemen, 20(2), 80-92.
Ford, E. W., Menachemi, N., & Phillips, M. T. (2016). Health information technology effectiveness research. Health Services Research, 51(S3), 1012-1031.
Furnell, S. M., & Clarke, N. L. (2012). User perceptions of information security risks and countermeasures. Computers & Security, 31(1), 83-90.
Gecomo, J., Klopp, A., & Rouse, M. (2020). Implementation of an evidence-based electronic health record downtime readiness and recovery plan. Online Journal of Nursing Informatics, 24(1), 1-12.
ISACA. (2019). COBIT 2019 framework: Governance and management objectives. ISACA Publications.
Kementerian Kesehatan Republik Indonesia. (2021). Cetak Biru Strategi Transformasi Digital Kesehatan 2024. Jakarta: Kementerian Kesehatan RI.
Kementerian Kesehatan Republik Indonesia. (2022). Rekam Medis: Peraturan Menteri Kesehatan Republik Indonesia Nomor 24 Tahun 2022. Jakarta: Kementerian Kesehatan RI.
Kementerian Kesehatan Republik Indonesia. (2024). Instrumen Survei Akreditasi Rumah Sakit. Jakarta: Direktorat Jenderal Pelayanan Kesehatan.
Kraus, S., Schiavone, F., Pluzhnikova, A., & Invernizzi, A. C. (2021). Digital transformation in healthcare: Analyzing the current state of research. Journal of Business Research, 123, 557-567.
Mambang, M., Marleny, F. D., Prastya, S. E., Zulfadhilah, M., Cipta, S. P., & Santoso, J. H. (2022). Evaluasi maturity level tata kelola teknologi informasi menggunakan COBIT 5 pada perpustakaan perguruan tinggi. Jurnal Nasional Komputasi dan Teknologi Informasi, 5(4), 652-658.
Marques, I. C. P., & Ferreira, J. J. M. (2019). Digital transformation in healthcare: A review of progress. Health and Technology, 9(1), 1-12.
Nowell, L. S., Norris, J. M., White, D. E., & Moules, N. J. (2017). Thematic analysis: Striving to meet the trustworthiness criteria. International Journal of Qualitative Methods, 16(1), 1-13.
Pratama, I., Nugroho, A., & Syafri, M. (2021). Pengukuran kapabilitas tata kelola TI menggunakan COBIT 2019 pada institusi pendidikan tinggi. Jurnal Teknologi Informasi dan Komunikasi, 12(2), 145-156.
Ramadhan, R., & Maulana, D. (2021). Evaluasi implementasi sistem informasi manajemen rumah sakit menggunakan pendekatan HOT-Fit. Jurnal Teknologi Informasi dan Ilmu Komputer, 8(3), 345-354.
Rusli, S. (2022). Implementasi sistem informasi manajemen rumah sakit dalam pengolahan data rumah sakit. Jurnal Kesehatan Masyarakat, 10(2), 158-168.
Salsabila, I. (2023). Analisis pengendalian internal dan risiko menggunakan pendekatan COSO pada rumah sakit X. Jurnal Sistem Informasi Kesehatan, 5(2), 77-90.
Sukamto, A. S., Novriando, H., & Reynaldi, A. (2021). Tata kelola teknologi informasi menggunakan COBIT 2019 pada UPT TIK Universitas Tanjungpura. Jurnal Edukasi dan Penelitian Informatika, 7(2), 210-219.
