<![CDATA[Hospitals implementing Electronic Medical Records (EMR) must ensure patient data security and confidentiality based on cybersecurity principles to prevent data breaches and misuse. EMR at Dr. Soeharto Heerdjan Mental Hospital has been implemented since 2019, but security issues remain, including shared login credentials and low cybersecurity awareness, which may compromise sensitive mental health data. This study aims to describe EMR security and confidentiality based on cybersecurity principles and analyze related threats and risks. A descriptive qualitative method was employed through in-depth interviews, observations, and document analysis involving medical record officers, IT staff, and nurses. Data were analyzed using the Miles and Huberman model. The results show that all seven security and confidentiality aspects have been implemented, but confidentiality, authentication, and non-repudiation remain weak due to simple passwords, shared logins, and the absence of Multi-Factor Authentication (MFA). Cybersecurity measures include firewalls, data encryption, and backup/recovery, although security log monitoring and recovery testing are not routine. The main threat is insider threats, followed by malware, phishing, and network disruptions. Strengthening layered authentication, regular security evaluations, and cybersecurity awareness is recommended.]]>
Copyrights © 2026
