Abstract:
The SIMRS Installation Unit manages the application of SIMRS in the Tampan Mental
Hospital to handle all the hospital's needs related to the application of technology.
However, the use of technology is not independent of the presence of risks. Risk is the
uncertainty that arises due to an action or failure of management. This research aims to
understand the process of analyzing the sources and categories of risk and to provide
suggestions that can help stakeholders minimize each risk's impact. The method in this
study directly adopts the ISO 31000 framework that focuses on applying a management
system. The study phases consist of communication and consultation, context setting, risk
assessment, and risk treatment, using the interview and questionnaire method with the
results of 25 risks divided into 9 middle-class risks and 16 low-category risks. The
proposed risk treatment is risk mitigation and sharing that can be used as a reference in
preserving information technology assets in the future.