IHE / ITI.BasicAudit

The Basic Audit Log Patterns (BALP) Implementation Guide is a Content Profile that defines some basic and reusable AuditEvent patterns. This includes basic audit log profiles for FHIR RESTful operations to be used when there is not a more specific audit event defined. A focus is enabling Privacy centric AuditEvent logs.

https://profiles.ihe.net/ITI/BALP/index.html

IHE/ITI.BasicAudit Issues

don't escape resource-id when cx type in balp for json
Closed 2 months ago1
Change of scope for AuditEvent
Updated 2 months ago3
Too much information contained in .query
Updated 2 months ago8
Patient access - security considerations
Updated 2 months ago4
define how to record an identity that is defined by a Certificate
Updated 2 months ago3
do not include authentication header in .query when jti is recorded in agent
Updated 2 months ago1
Changes in R5 (R6) to AuditEvent
Closed 2 months ago
Specify tracing identifiers in AuditEvents
Updated 7 months ago
Fixed values need explicit minimum cardinality of 1
Closed 8 months ago3
Fix read subtype slicing
Closed 8 months ago3
Base ResourceType should be part of the AuditEvent
Updated a year ago
Missing definition of 'subject indicated'
Updated a year ago
Missing definition of 'request'
Updated a year ago1
define how to encode a DN into a URI
Updated a year ago2
OAuth jti as policy
Closed a year ago
software details
Updated a year ago
Described use of Source and Destination Role ID does not agree with profile use.
Closed a year ago2
Pattern slicing of CodableConcepts incorrectly includes display values
Closed a year ago3
Open Issue 21: slicing an extension in a slice
Closed a year ago3
Need minimal profile for failed transactions
Updated a year ago2
Inconsistent codes used for agent:client and agent:server slices
Closed a year ago2
extensions should have context
Closed a year ago
should have CapabilityStatement for each Actor
Closed 2 years ago1
Open Issue 7: x-request-id
Updated 2 years ago4
Basic RESTful AuditEvent Profiles imply that OAuth is mandatory
Closed 2 years ago6
sushi slice numeric warnings
Closed 2 years ago1
Update Audit Creator and Audit Consumer Actor definitions
Closed 2 years ago
Open Issue 2: oAuth approach
Updated 2 years ago2
Open Issue 22: Options are not defined
Updated 2 years ago
Approved to move to TI
Closed 2 years ago
Open Issue 1: actors
Closed 2 years ago3
Open Issue 6: beyond REST
Updated 2 years ago2
Open Issue 4: examples from MHD, PIXm, and PDQm
Closed 2 years ago2
open Issue 5: derived profiling for Patient specific
Closed 2 years ago1
Open Issue 8: identifier vs reference
Closed 2 years ago2
Open Issue 9: homeCommunityId as agent
Closed 2 years ago1
Open Issue 16: response time
Closed 2 years ago2
Open Issue 17: meta.security use for maximal populated
Closed 2 years ago2
Open Issue 18: assurance level
Updated 2 years ago2
Open Issue 10: SAML
Closed 2 years ago1
Open Issue 13: search parameters in .description
Closed 2 years ago1
Open Issue 11: SNOMED
Closed 2 years ago1
Open Issue 12: other usecases
Closed 2 years ago1
Open Issue 20: use of short and comment
Closed 2 years ago1
Open Issue 19: UDAP
Updated 2 years ago1
Open Issue 3: future improvements with FHIR R5
Updated 2 years ago
disclose does not always know the purpose of event
Closed 2 years ago
otherId as Identifier not Reference
Closed 2 years ago1
disclose too specific to disclosing documents
Closed 2 years ago
use ITI icon from template
Closed 2 years ago