ABSTRAKSI: Electronic Health Records (EHR) merupakan objek dalam sistem informasi di Rumah Sakit Muhammadiyah Bandung yang berperan sebagai catatan penanganan kesehatan pasien di rumah sakit. Pengelolaan EHR itu sendiri memerlukan audit sistem informasi untuk mengevaluasi, mengukur kualitas, dan memberikan rekomendasi terhadap sistem informasi tersebut. Audit sistem informasi ini dilakukan melalui metode dengan pendekatan sistematis dan logis berupa framework. Dalam penelitian ini dipergunakan framework COBIT 5 pada domain Build, Acquire, and Implement (BAI) dimana penelitian mempunyai fokus dalam pengukuran kapabilitas pembangunan sistem informasi yang mampu menyelaraskan objek-objek dalam sistem informasi EHR melalui berbagai proses rekayasa (engineering) di dalamnya. Penggunaan COBIT 5 diawali dengan pemilihan processes melalui pemetaan menuju Enterprise Goals, IT-related Goals, dan IT-related Process dimana pada penelitian ini menghasilkan BAI01 s.d. BAI10 yang dipergunakan sebagai ruang lingkup. Berdasarkan penelusuran mempergunakan COBIT 5, diperoleh nilai kapabilitas pada EHR di RS Muhammadiyah Bandung secara expected seluruh processes berada pada established level (score 3,67), sedangkan secara reality terdapat 9 processes berada pada managed level dan 1 process berada pada performed level (score 2,22). Rekomendasi perbaikan sistem informasi EHR disusun berdasarkan process definition, process deployment, performance management, dan work product management sebagai process attribute capability antara established level dengan managed level dan performed level.
Kata Kunci : Audit sistem informasi, COBIT 5, Domain BAI, Electronic Health RecordsABSTRACT: Electronic Health Records (EHR) is object on information system of Bandung Muhammadiyah Hospital that have role as patient’s healthy handling records on hospital. EHR management needs information system audit for evaluate, assess quality, and give recommendations for its information system. This research uses COBIT 5 framework as systematic and logic approach on Build, Acquire, and Implement (BAI) domain where the research has focus on measuring capability of information system building that enable to align objects in EHR information system through engineering technique inside. Usage of COBIT 5 is started by processes selection through Enterprise Goals, IT-related Goals, and IT-related Process mapping where in this case the outputs are BAI01 until BAI10 processes as scope. The expected level on RSMB’s EHR by COBIT 5 for all processes is established (score 3.67) while the reality level for 9 processes are managed and 1 process is performed (score 2.22). Recommendation for system repairing has been arranged based process definition, process deployment, performance management, and work product management as process attribute capability between established level from managed level and performed level.
Keyword: Information system audit, COBIT 5, Domain BAI, Electronic Health Records