Evaluating Electronic Medical Record Systems Based on Security Standards

Abstract

Most medical institutions today are moving towards building a medical record system for patients or citizens in order to facilitate the follow-up and treatment of the patient's health status. Including what is known as the electronic medical record. The data of these medical records are sensitive for patients, as only the authorized persons can access or amend them. In order to ensure the integrity and correctness of this data, security policies and standards must be followed that govern dealing with electronic medical records systems. Some medical institutions in Sudan that operate on the electronic medical records system may face some problems in how to secure patient data or prevent unauthorized persons from accessing this data. This research provides an evaluation of the existing medical records systems and available in some hospitals and medical centers in Khartoum State according to health security standards for electronic medical records systems. The main problem is that these medical institutions lack the security standards and policies for electronic medical records systems, and this does not guarantee the safety and correctness of this sensitive data. The research evaluate the health systems and to know the extent to which they apply health security standards for medical systems, and the evaluation was done by users of these systems, according to the results of the evaluation that was conducted through the research, and it was found that there is a variation in the rates of application of security standards for health systems in medical centers and hospitals.