Audit Keamanan Sistem Informasi Manajemen Rumah Sakit Dengan Framework COBIT 2019 Pada RSUD Palembang BARI

This study examines the implementation of information system at RSUD Palembang BARI with aim enhancing security. In this context, a security audit is conducted using COBIT 2019 framework. The domains and processes utilizing include EDM03, APO12, APO13, APO14, DSS05. research involves identification evaluation risks, determination necessary controls, ensuring compliance standards established by 2019. findings indicate that level 3 (Defined), gap analysis difference 1 below expected target. Based on above results, efforts to improve enhance are still needed. use techniques such as vulnerability scanning, penetration testing, WAF, IDS IPS, data encryption, well improving in terms server physical aspects installing CCTV restricting user access cards or fingerprints, can be implemented ensure relevant standards. Consideration for obtaining certifications, like ISO 27001, should also taken. Additionally, quality human resources policy-making ability employees address threats attacks improved through training strengthening coordination among employees.