HL7 Personal Health Record System Functional Model, Release 2
2.0.1-ballot - Normative Ballot

This page is part of the HL7 Personal Health Record System Functional Model, Release 2 (v2.0.1-ballot: Normative 1 Ballot 1) based on FHIR (HL7® FHIR® Standard) v5.0.0. No current official version has been published yet. For a full list of available versions, see the Directory of published versions

Requirements: TI.2.1.2.1 Security Event Security Audit Trigger (Function)

Page standards status: Informative
Statement N:

Manage Audit Trigger initiated to track Security event.

 Description I:

Capture security events, both routine and exceptional, including key metadata (who, what, when, where, why).

 Actors:
ehr Criteria N:
TI.2.1.2.1#01 dependent SHALL

The system SHALL audit each occurrence when security events are detected according to scope of practice, organizational policy, and/or jurisdictional law.
TI.2.1.2.1#02 SHALL

The system SHALL capture identity of the organization.
TI.2.1.2.1#03 conditional SHALL

IF known, THEN the system SHALL capture identity of the user.
TI.2.1.2.1#04 SHALL

The system SHALL capture identity of the system.
TI.2.1.2.1#05 SHALL

The system SHALL capture the event initiating audit trigger.
TI.2.1.2.1#06 SHALL

The system SHALL capture the date and time of the event initiating audit trigger.
TI.2.1.2.1#07 SHALL

The system SHALL capture identity of the location (i.e., network address).
TI.2.1.2.1#08 MAY

The system MAY capture the rationale for the event initiating audit trigger.