Several companies and organizations are being violated and affected by threats, attacks or theft of information or money from their computer systems. Among them, health institutions, which handle confidential and sensitive data. There is a standard, NCh-ISO 27001, which defines the requirements to establish, implement, maintain and continuously improve an Information Security Management System. The article analyzes the advances in this area in the health sector in Chile; and presents a research, based on surveys, on the degree of knowledge and the degree of implementation of NCh-ISO 27001 in the establishments and Health Services of the country. The results obtained are analyzed, and there is evidence of the urgent need to implement and complete internal processes conducive to having an appropriate, efficient and effective information security management system.