Change Management Efficiently Across Change Control Processes According To ISO27001:2013

Abstract

          Currently, the various organizations have applied information technology to manage the organization that use for collect information to drive the organization to reach the goal.  The mission of the Faculty of Medicine Siriraj Hospital is patient treatment, teaching, and researching. The various information systems are connected and shared important information such as patient profile, patient medical record. The medical research information including information on organization management services must be accurate, complete and available. The Department of Information Technology, Siriraj Hospital recognized aware of the importance of information security and to support the mission of medical service. Resulting in the establishment of the project of the Information Security Management System (ISO27001:2013) and results covering the entire organization.

          The standard of ISO27001: 2013 has the Change Control Procedure process in order to respond in terms of rapid change and development. Siriraj Hospital Information Technology department requires adaptation and using technology to provide patient service, respond immediately including business development and management. The Change Control Process encourages management, clear operation plans and reduces the overall impact on the information system.  The systematic operation makes the Faculty of Medicine Siriraj Hospital able to effectively follow the organization’s mission.