RISK ASSESSMENT ON INTEGRATED HEALTHCARE INFORMATION SYSTEM (CASE PT. INFOKES INDONESIA)

• Main Author: Hanif Hidayat, Muhammad
• Format: Theses
• Language: Indonesia
• Subjects: Manajemen umum
• Online Access: https://digilib.itb.ac.id/gdl/view/46377
• Institution: Institut Teknologi Bandung

Health sector one of the key priorities of the government's attention because it can be a catalyst for a country's economic growth. The increase in the standard of living of the community is directly proportional to the increase in health quality demands. The need for a stable and effective health care system drives several companies to innovate through the creation of various applications for health information system. PT. Infokes Indonesia is one of startup company that focuses on hospital information service system providers. However Infokes never carried out risk assessment of the company’s business activity, lack of understanding and resources to develop and implement risk management solutions is the main reason for the company. Recently the Minister of Health Regulation No. 31 of 2019 also established information service standards for puskesmas requires risk control for healthcare service support equipment. Based on this, the choice of taking risk assessment on the business process Infokes should be carefully reviewed and the performance of the company should be assessed first. This final project adapting the ISO 31000 : 2018 framework. To define the company's risks, author conduct interview as first stage. External and internal analysis is the second step in the research process. Both of analysis will summarized SWOT of PT. Infokes Indonesia, which will be used in determining company risk attributes. Analytical Hierarchy Process is used in the making of risk measurement, AHP process will run with Expert Choice Software. Before create risk mitigation, risk evaluation needs to conduct to define heat mapping of Infokes risk and evaluates the level of risk contained for risk mitigation. The last step is making an implementation risk management plan for Infokes. The results of the risk analysis show there are 24 risk factors from 7 risk types were identified from the risk identification process: Business risk, Financial Risk, Human Resource Risk, Technological Risk, Environmental Risk Operational Risk, and Reputational Risk. There are 1 risk that has a critical risk level, and 6 risk that has a high risk level. The implementation plan and time schedule consists of strategy in how to address risk, what action to be taken, who is responsible for action to reduce likelihood and impact of these risks, and duration of time needed to implement those strategies