The present study aimed to investigate the effect of institutional theory dimensions on information security management based on ISO 27001 in Shahrekord Medical Sciences Teaching Hospitals, which was conducted using a descriptive-correlation method. The study's statistical population included Shahrekord hospitals, which consisted of 10 hospitals and 3 clinics, of which hospital information technology experts were surveyed using a census method. After distributing 48 questionnaires, 45 completed questionnaires were finally obtained, and the questionnaire data were analyzed. The research variables were measured using the standard questionnaire of Cavusoglu et al. (2015) and the Security Management System Quality Assessment Questionnaire using ISO 27001. The variables in the questionnaire were measured on a five-point Likert scale. Data analysis was performed at two levels: descriptive statistics using SPSS software and inferential statistics using partial least squares using SmartPLS software. The results of the findings from the analysis of research data showed that the two components of imitative and normative pressure with coefficients of 0.25 and 0.32 had a positive and significant effect on information security management and were able to explain and predict 62% of the changes in information security management in teaching hospitals of Shahrekord University of Medical Sciences.