HL7 Electronic Health Record System Functional Model, Release 2.1.1
2.1.1 - Normative International flag

This page is part of the HL7 Electronic Health Record System Functional Model, Release 2.1.1 (v2.1.1: Normative 1 - Normative) based on FHIR (HL7® FHIR® Standard) v5.0.0. This is the current published version. For a full list of available versions, see the Directory of published versions

Requirements: TI.2.1.2.2 User Authentication to the System (Start user session) Security Audit Trigger (Function)

Official URL: http://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-TI.2.1.2.2 Version: 2.1.1
Standards status: Normative Computable Name: TI_2_1_2_2_User_Authentication_to_the_System__Start_user_session__Security_Audit_Trigger

Manage Audit Trigger initiated to track user authentication to the system (start user session).

Description I:

Capture user authentication to the system (start user session), both routine and exceptional, including key metadata (who, what, when, where, why).

Criteria N:
TI.2.1.2.2#01 SHALL

The system SHALL audit each occurrence of user authentication at logon (start session).
TI.2.1.2.2#02 SHALL

The system SHALL capture identity of the organization.
TI.2.1.2.2#03 SHALL conditional

IF known, THEN the system SHALL capture identity of the user.
TI.2.1.2.2#04 SHALL

The system SHALL capture identity of the system.
TI.2.1.2.2#05 SHALL

The system SHALL capture the event initiating audit trigger.
TI.2.1.2.2#06 SHALL

The system SHALL capture the date and time of the event initiating audit trigger.
TI.2.1.2.2#07 SHALL

The system SHALL capture identity of the location (i.e., network address).
TI.2.1.2.2#08 SHALL

The system SHALL capture the method of user authentication (e.g., user ID, password, biometrics, token, security question(s)).