HL7 Electronic Health Record System Functional Model, Release 2.1.1
2.1.1-ballot - Normative Ballot International flag

This page is part of the HL7 Electronic Health Record System Functional Model, Release 2.1.1 (v2.1.1-ballot: Normative 1 Ballot 1) based on FHIR (HL7® FHIR® Standard) v5.0.0. No current official version has been published yet. For a full list of available versions, see the Directory of published versions

Requirements: TI.2.1.2.3 User Authentication (System Prompt for Password Change) Security Audit Trigger (Function)

Page standards status: Informative
Statement N:

Manage Audit Trigger initiated to track user authentication (system prompt for password change).

Description I:

Capture user authentication (system prompt for password change), both routine and exceptional, including key metadata (who, what, when, where, why).

Actors:
ehr
Criteria N:
TI.2.1.2.3#01 SHALL

The system SHALL audit each occurrence of user authentication when user is prompted to change password.

TI.2.1.2.3#02 SHALL

The system SHALL capture identity of the organization.

TI.2.1.2.3#03 conditional SHALL

IF known, THEN the system SHALL capture identity of the user.

TI.2.1.2.3#04 SHALL

The system SHALL capture the identity of the system.

TI.2.1.2.3#05 SHALL

The system SHALL capture the event initiating audit trigger.

TI.2.1.2.3#06 SHALL

The system SHALL capture the date and time of the event initiating audit trigger.

TI.2.1.2.3#07 SHALL

The system SHALL capture identity of the location (i.e., network address).

TI.2.1.2.3#08 conditional SHALL

IF password change successful, THEN the system SHALL capture the new password.