Auditable Events. Each QHIN shall abide by the auditable events requirements described in the QHIN Technical Framework. Additionally, each QHIN’s security policy shall include the following auditing requirements for each Exchange Purpose that it performs: (i) Auditable events as required by the QHIN Technical Framework; (ii) An audit log including records for all auditable events required by the QHIN Technical Framework. A QHIN shall retain all audit logs (both electronic and non-electronic) in accordance with Applicable Law and make such audit logs available during any audit; and (iii) A record of an auditable event which at a minimum should include the following information: • The description of the event; • The date and time the event occurred; • A success or failure indicator; and (where appropriate) • The identity of the entity and/or operator that was responsible for the event.
Appears in 1 contract
Sources: Common Agreement
Auditable Events. Each QHIN shall abide by the auditable events requirements described in the QHIN Technical Framework. Additionally, each QHIN’s security policy shall include the following auditing requirements for each Exchange Purpose that it performs:
(i) Auditable events as required by the QHIN Technical Framework;
(ii) An audit log including records for all auditable events required by the QHIN Technical Framework. A QHIN shall retain all audit logs (both electronic and non-non- electronic) in accordance with Applicable Law and make such audit logs available during any audit; and
(iii) A record of an auditable event which at a minimum should include the following information: • The description of the event; • The date and time the event occurred; • A success or failure indicator; and (where appropriate) • The identity of the entity and/or operator that was responsible for the event.
Appears in 1 contract
Sources: Trusted Exchange Framework and Common Agreement (Tefca)