Assessing Information Security Awareness among Electronic Medical Records Personnel in Indonesia: A Preliminary Validation of the HAIS-Q

Objective: This study aimed to evaluate preliminary evidence of the validity and internal consistency of the Indonesian version of the Human Aspects of Information Security Questionnaire (HAIS-Q) and to assess information security awareness among medical records personnel using electronic medical records (EMR) systems.Material and Methods: A cross-sectional pilot study was conducted involving 52 medical records personnel who routinely used EMR systems. Construct validity was examined using Spearman’s rank correlation, while internal consistency was assessed using Cronbach’s alpha. Descriptive and correlational analyses were performed to examine relationships among knowledge, attitude, and behavior dimensions across seven information security focus areas.Results: The instrument demonstrated acceptable item-level construct validity following item refinement and strong overall reliability. Correlation analysis revealed a patterned relationship among knowledge, attitude, and behavior, with attitude showing a stronger association with behavior than knowledge alone. Domain-level analysis further highlighted variation in awareness across focus areas, with information handling demonstrating the most pronounced behavioral gap.Conclusion: The Indonesian version of the HAIS-Q provides preliminary evidence of validity and internal consistency for assessing information security awareness among medical records personnel using EMR systems. The findings emphasize the need for targeted, behavior-focused strategies to strengthen information security practices in healthcare records management contexts.