check assumptions and requirements for the implementation of information security management system hospital in tabriz

the purpose of this study was to investigate and analyze the assumptions and requirements for the implementation of information security management system (isms). to check assumptions security management system implementation is the population of tabriz hospitals. because information security, is considered most hospitals cooperate and only 8 hospitals of tabriz, as the population of the study. review the requirements and assumptions are based on the standard iso / iec 27001, iso / iec 27002 test target setting and iso 27001 standard questionnaire containing 33 questions in 11 control is used. to analyze the data descriptive and inferential statistical methods were used that implementation of information security management system was confirmed. as well as to identify factors affecting the implementation of information security management system and factor analysis, structural equation model was used pls smart software that based on its findings indirectly relates to impact the four dimensions of implementation effectiveness of the system. the study findings were presented.