This study aims to analyze the readiness of healthcare facilities in managing electronic medical record (EMR) information control and its relationship to the ISO 27001:2022 information security standard. The method used was a systematic literature review of 11 peer-reviewed scientific articles obtained from the PubMed, Scopus, and ProQuest databases using the PRISMA framework and a thematic analysis based on Population-Concept-Context (PCC). The results indicate that readiness for EMR implementation is influenced by multidimensional factors, including organizational readiness, human resource competencies, technological infrastructure, and information security governance. Key challenges include low digital literacy, weak managerial support, infrastructure limitations, and concerns regarding data security and privacy. Additionally, a gap was identified between system readiness and user readiness (socio-technical gap). This study contributes by mapping empirical findings against ISO 27001:2022 controls, demonstrating that EMR implementation challenges are closely related to risk management, access controls, system audits, and personal data protection. These findings underscore that the success of EMR implementation depends not only on technology but also on integrated information security governance.
Copyrights © 2026