1.22.2.1.221 Value Set http://hl7.org/fhir/vs/security-event-sub-type

This value set contains 35 concepts

1.22.2.1.221.1 Security Event Sub-Type

More detailed code concerning the type of the security event - defined by DICOM with some FHIR specific additions

Copyright Statement: These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright 2011 by the National Electrical Manufacturers Association

This value set includes codes defined in other code systems, using the following rules:

• Include these codes as defined in http://nema.org/dicom/dicm

  Code	Display
  110120	Application Start	Audit event: Application Entity has started
  110121	Application Stop	Audit event: Application Entity has stopped
  110122	Login	Audit event: User login has been attempted
  110123	Logout	Audit event: User logout has been attempted
  110124	Attach	Audit event: Node has been attached
  110125	Detach	Audit event: Node has been detached
  110126	Node Authentication	Audit event: Node Authentication has been attempted
  110127	Emergency Override Started	Audit event: Emergency Override has started
  110128	Network Configuration	Audit event: Network configuration has been changed
  110129	Security Configuration	Audit event: Security configuration has been changed
  110130	Hardware Configuration	Audit event: Hardware configuration has been changed
  110131	Software Configuration	Audit event: Software configuration has been changed
  110132	Use of Restricted Function	Audit event: A use of a restricted function has been attempted
  110133	Audit Recording Stopped	Audit event: Audit recording has been stopped
  110134	Audit Recording Started	Audit event: Audit recording has been started
  110135	Object Security Attributes Changed	Audit event: Security attributes of an object have been changed
  110136	Security Roles Changed	Audit event: Security roles have been changed
  110137	User security Attributes Changed	Audit event: Security attributes of a user have been changed
  110138	Emergency Override Stopped	Audit event: Emergency Override has Stopped
  110139	Remote Service Operation Started	Audit event: Remote Service Operation has Begun
  110140	Remote Service Operation Stopped	Audit event: Remote Service Operation has Stopped
  110141	Local Service Operation Started	Audit event: Local Service Operation has Begun
  110142	Local Service Operation Stopped	Audit event: Local Service Operation Stopped

• Include these codes as defined in http://hl7.org/fhir/restful-interaction

  Code	Display
  read	read	Read the current state of the resource
  vread	vread	Read the state of a specific version of the resource
  update	update	Update an existing resource by its id (or create it if it is new)
  delete	delete	Delete a resource
  validate	validate	Check that the content would be acceptable as an update
  create	create	Create a new resource with a server assigned id
  history-instance	history-instance	Retrieve the update history for a particular resource
  history-type	history-type	Retrieve the update history for a all resources of a particular type
  history-system	history-system	Retrieve the update history for all resources on a system
  search-type	search-type	Search all resources of the specified type based on some filter criteria
  search-system	search-system	Search all resources based on some filter criteria
  transaction	transaction	Update, create or delete a set of resources as a single transaction