标准资料网-标准资料免费资源平台

MIL-R-1296E, MILITARY SPECIFICATION: RIFLE, CALIBER .22 LR, COMMERCIAL, FOR MATCH AND TRAINING (21 MAR 1988)., This specification covers the requirements, examinations and tests for one type of manually operated, bolt-action, heavy barrel, rimfired rifle of commercial design.【英文标准名称】:StandardSpecificationforAuditandDisclosureLogsforUseinHealthInformationSystems
【原文标准名称】:保健信息系统中使用的审核与揭示记录的标准规范
【标准号】:ASTME2147-2001(2009)
【标准状态】:现行
【国别】:美国
【发布日期】:2001
【实施或试行日期】:
【发布单位】:美国材料与试验协会(US-ASTM)
【起草单位】:E31.25
【标准类型】:(Specification)
【标准水平】:()
【中文主题词】:
【英文主题词】:Accessauditlogs;Audits;Datamanagement--security;Disclosurelogs;Healthknowledge/informationsystems;Medicalmaterials/applications--specifications;Patientbiographical/medicaldata--specifications;Securityaudit/disclosurelogs
【摘要】:Datathatdocumenthealthservicesinhealthcareorganizationsarebusinessrecordsandmustbearchivedtoasecondarybutretrievablemedium.Auditlogsshouldberetained,ataminimum,accordingtothestatutegoverningmedicalrecordsinthegeographicarea.Thepurposeofauditaccessanddisclosurelogsistodocumentandmaintainapermanentrecordofallauthorizedandunauthorizedaccesstoanddisclosureofconfidentialhealthcareinformationinorderthathealthcareproviders,organizations,andpatientsandotherscanretrieveevidenceofthataccesstomeetmultipleneeds.Examplesareclinical,organizational,riskmanagement,andpatientrights''needs.Auditlogsdesignedforsystemaccessprovideaprecisecapabilityfororganizationstoseewhohasaccessedpatientinformation.Duetothesignificantriskincomputingenvironmentsbyauthorizedandunauthorizedusers,theauditlogisanimportantmanagementtooltomonitor,accessretrospectively.Inaddition,theaccessanddisclosurelogbecomesapowerfulsupportdocumentfordisciplinaryaction.Auditlogsareessentialcomponentstocomprehensivesecurityprogramsinhealthcare.Organizationsareaccountableformanagingthedisclosureofhealthinformationinawaythatmeetslegal,regulatory,accreditationandlicensingrequirementsandgrowingpatientexpectationsforaccountableprivacypractices.Basicaudittrailproceduresshouldbeapplied,manuallyifnecessary,inpaperpatientrecordsystemstotheextentfeasible.Securityinhealthinformationsystemsisanessentialcomponenttomakingprogressinbuildingandlinkingpatientinformation.Successfulimplementationoflargescalesystems,theuseofnetworkstotransmitdata,growingtechnicalcapabilitytoaddresssecurityissuesandconcernsabouttheconfidentiality,andsecurityprovisionsofpatientinformationdrivethefocusonthistopic.(SeeGuideE1384.)Consumerfearsaboutconfidentialityofhealthinformationandlegalinitiativesunderscoredisclosurepractices.Patientsandhealthcareproviderswantassurancethattheirinformationisprotected.Technologyexiststoincorporateauditfunctionsinhealthinformationsystems.Advancesinsecurityauditexpertsystemscanbeappliedtothehealthcareindustry.Emergingoff-the-shelfproductswillbeabletouseauditlogstoenablethedetectionofinappropriateuseofhealthinformation.Institutionsareaccountableforimplementingcomprehensiveconfidentialityandsecurityprogramsthatcombinesocialelements,management,andtechnology.1.1Thisspecificationisforthedevelopmentandimplementationofsecurityaudit/disclosurelogsforhealthinformation.Itspecifieshowtodesignanaccessauditlogtorecordallaccesstopatientidentifiableinformationmaintainedincomputersystemsandincludesprinciplesfordevelopingpolicies,procedures,andfunctionsofhealthinformationlogstodocumentalldisclosureofhealthinformationtoexternalusersforuseinmanualandcomputersystems.Theprocessofinformationdisclosureandauditingshouldconform,whererelevant,withthePrivacyActof1974(1).1.2Thefirstpurposeofthisspecificationistodefinethenature,role,andfunctionofsystemaccessauditlogsandtheiruseinhealthinformationsystemsasatechnicalandproceduraltooltohelpprovidesecurityoversight.Inconcertwithorganizationalconfidentialityandsecuritypoliciesandprocedures,permanentauditlogscanclearlyidentifyallsystemapplicationuserswhoaccesspatientidentifiableinformation,recordthenatureofthepatientinformationaccessed,andmaintainapermanentrecordofactionstakenbytheuser.Byprovidingaprecisemethodforanorganizationtomonitorandreviewwhohasaccessedpatientdata,auditlogshavethepotentialformore......
【中国标准分类号】:C07
【国际标准分类号】:35_240_80
【页数】:6P.;A4
【正文语种】:英语