【英文标准名称】:StandardSpecificationforAuditandDisclosureLogsforUseinHealthInformationSystems
【原文标准名称】:保健信息系统中使用的审核与揭示记录的标准规范
【标准号】:ASTME2147-2001
【标准状态】:现行
【国别】:
【发布日期】:2001
【实施或试行日期】:
【发布单位】:美国材料与试验协会(US-ASTM)
【起草单位】:E31.25
【标准类型】:(Specification)
【标准水平】:()
【中文主题词】:
【英文主题词】:audit;disclosurelogs;healthinformationsystems
【摘要】:1.1Thisspecificationisforthedevelopmentandimplementationofsecurityaudit/disclosurelogsforhealthinformation.Itspecifieshowtodesignanaccessauditlogtorecordallaccesstopatientidentifiableinformationmaintainedincomputersystemsandincludesprinciplesfordevelopingpolicies,procedures,andfunctionsofhealthinformationlogstodocumentalldisclosureofhealthinformationtoexternalusersforuseinmanualandcomputersystems.Theprocessofinformationdisclosureandauditingshouldconform,whererelevant,withthePrivacyActof1974(1).1.2Thefirstpurposeofthisspecificationistodefinethenature,role,andfunctionofsystemaccessauditlogsandtheiruseinhealthinformationsystemsasatechnicalandproceduraltooltohelpprovidesecurityoversight.Inconcertwithorganizationalconfidentialityandsecuritypoliciesandprocedures,permanentauditlogscanclearlyidentifyallsystemapplicationuserswhoaccesspatientidentifiableinformation,recordthenatureofthepatientinformationaccessed,andmaintainapermanentrecordofactionstakenbytheuser.Byprovidingaprecisemethodforanorganizationtomonitorandreviewwhohasaccessedpatientdata,auditlogshavethepotentialformoreeffectivesecurityoversightthantradi
【中国标准分类号】:C05
【国际标准分类号】:35_240_80
【页数】:5P.;A4
【正文语种】: