Information security risk assessment in health institutions and measure information security user awareness

With increasing dependence on developing technology and computer use, national and international laws and obligations, along with the increasing risks today's information security has been a critical issue. Attacks on information systems, destruction of information, the information falling into the 3rd parties indicate the size of the risks. This study in two health facilities in Adana have been made to make a risk assessment of information security for the purpose of measuring the level of information security awareness of users. In the study, 251 persons have been taken part in the survey and determined the threat levels according to users in hospital. The collected data analyzed with SPSS according to the results, in which a higher level of risk or a higher priority are listed. The relation between this threats and individual's age, gender, educational background, professional experience, levels of computer information and information security have been revealed. The most important threats according to participants are sharing of the password and leaking of the patient's data. The majority of the participants (70.9%) have been setting strong passwords and not sharing their password with anyone. The profession group that shares passwords the most is the doctors, and the result is that they share their passwords with their helpers. Information security is a critical issue for all employees and especially for managers. For this reason, information security policies should be developed by institutions, these policies should be shared with all employees and information security awareness training should be given to users.