Modifying Without a Trace: High-level Audit Guidelines are Inadequate for Electronic Health Record Audit Mechanisms: Difference between revisions

Jump to navigation Jump to search
Line 93: Line 93:


=== 4.1 High-level Assessment using Audit Guidelines and Checklists ===
=== 4.1 High-level Assessment using Audit Guidelines and Checklists ===
Section 4.1.1 describes the derivation of our high-level assessment criteria for user-based non-repudiation based on non-specific auditable event types. Section 4.1.2 describes our methodology for assessing EHR system audit mechanisms.


==== 4.1.1 Derivation of Non-specific Auditable Events ====
==== 4.1.1 Derivation of Non-specific Auditable Events ====