More detailed code concerning the type of the audit event - defined by DICOM with some FHIR specific additions.
Copyright Statement: These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical Manufacturers Association.
This value set includes codes from the following code systems:
| Code | Display | |
| 110120 | Application Start | Audit event: Application Entity has started |
| 110121 | Application Stop | Audit event: Application Entity has stopped |
| 110122 | Login | Audit event: User login has been attempted |
| 110123 | Logout | Audit event: User logout has been attempted |
| 110124 | Attach | Audit event: Node has been attached |
| 110125 | Detach | Audit event: Node has been detached |
| 110126 | Node Authentication | Audit event: Node Authentication has been attempted |
| 110127 | Emergency Override Started | Audit event: Emergency Override has started |
| 110128 | Network Configuration | Audit event: Network configuration has been changed |
| 110129 | Security Configuration | Audit event: Security configuration has been changed |
| 110130 | Hardware Configuration | Audit event: Hardware configuration has been changed |
| 110131 | Software Configuration | Audit event: Software configuration has been changed |
| 110132 | Use of Restricted Function | Audit event: A use of a restricted function has been attempted |
| 110133 | Audit Recording Stopped | Audit event: Audit recording has been stopped |
| 110134 | Audit Recording Started | Audit event: Audit recording has been started |
| 110135 | Object Security Attributes Changed | Audit event: Security attributes of an object have been changed |
| 110136 | Security Roles Changed | Audit event: Security roles have been changed |
| 110137 | User security Attributes Changed | Audit event: Security attributes of a user have been changed |
| 110138 | Emergency Override Stopped | Audit event: Emergency Override has Stopped |
| 110139 | Remote Service Operation Started | Audit event: Remote Service Operation has Begun |
| 110140 | Remote Service Operation Stopped | Audit event: Remote Service Operation has Stopped |
| 110141 | Local Service Operation Started | Audit event: Local Service Operation has Begun |
| 110142 | Local Service Operation Stopped | Audit event: Local Service Operation Stopped |