Topics

Audit Trail

Search:

Healthcare information is very sensitive. It is essential to grant limited access to Menu options to different users depending on their roles and responsibilities. A good access control mechanism is essential but not sufficient. It is equally important to also log who is updating and accessing what information. We discussed the RCUD (Read, Create, Update, Delete) rights in the Roles option. An audit trail can be generated on each one of these events. Similarly, most of these events are applicable for each Menu option, and a corresponding audit trail log can be generated for all of them. The user will, however, have a practical balance between what is important, sensitive, frequency of access, and the logging of Audit Trail events. If the application is asked to generate a trail for all events, it would be busy most of the time logging the trail, thus deteriorating performance. It is recommended that the audit trail not be selected for Read. The only exception could be an encounter. Define all the required events here. On running the application, whenever the selected event takes place, a log is created specifying the User, Menu Option, Access Used, Date, Time, and Record Affected. All these details can be viewed and tracked by the Admin.