Information Security Culture in Public Hospitals

Traditionally, most of the researchers and experts in the field of information security believed a technological solution to address majority of information security issues. However, contemporary studies have shown that a not-technical solution including the human behavior and processes are as important as in safeguarding organization information assets. The main objective of this research was to assess the perception, belief, attitude and action of Hawassa Referral Hospital with regard to information security to help the information protection activities of the hospital. It was found that, 83% of the study participants have low level of awareness and knowledge about information security. About 63% of the respondents reported that management does not assist to the implementation and incorporation of information security in the hospital. It was also found that the hospital do not have a clear law or policy about how information in the hospital can be stored, processed or used. About 63% of the respondents and senior management believed the importance of implementing information security in the hospital.