<status value="active"/> <date value="2025-12-19T08:44:27+00:00"/> <publisher value="HL7 International / Electronic Health Records"/> <contact> <telecom> <system value="url"/> <value value="http://www.hl7.org/Special/committees/ehr"/> </telecom> </contact> <description value="Manage System Audit Triggers"/> <jurisdiction> <coding> <system value="urn:iso:std:iso:3166"/> <code value="US"/> </coding> </jurisdiction> <purpose value="System Audit Triggers are designed to capture system related events, both routine and exceptional, including key metadata (who, what, when, where, why)."/> <derivedFrom value="http://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-TI.2.1.3"/> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-01"/> <label value="TI.2.1.3#01"/> <conformance value="SHOULD"/> <conditionality value="false"/> <requirement value="The system SHOULD provide the ability to log system maintenance events for loading new versions of, or changes to, the clinical system."/> <derivedFrom value="TI.2.1.3#1"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-02"/> <label value="TI.2.1.3#02"/> <conformance value="SHOULD"/> <conditionality value="false"/> <requirement value="The system SHOULD provide the ability to store system maintenance events for loading new versions of codes and knowledge bases."/> <derivedFrom value="TI.2.1.3#2"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-03"/> <label value="TI.2.1.3#03"/> <conformance value="SHOULD"/> <conditionality value="false"/> <requirement value="The system SHOULD provide the ability to log system maintenance events for creating and restoring of backup."/> <derivedFrom value="TI.2.1.3#3"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-04"/> <label value="TI.2.1.3#04"/> <conformance value="SHOULD"/> <conditionality value="false"/> <requirement value="The system SHOULD provide the ability to audit events in the case of detection of corrupt or dirty data."/> <derivedFrom value="TI.2.1.3#4"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-05"/> <label value="TI.2.1.3#05"/> <conformance value="SHALL"/> <conditionality value="false"/> <requirement value="The system SHALL provide the ability to audit the access and usage of systems, data, and organizational resources."/> <derivedFrom value="TI.2.1.3#5"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-06"/> <label value="TI.2.1.3#06"/> <conformance value="SHALL"/> <conditionality value="false"/> <requirement value="The system SHALL provide the ability to log system events at the hardware and software architecture level."/> <derivedFrom value="TI.2.1.3#6"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-07"/> <label value="TI.2.1.3#07"/> <conformance value="SHALL"/> <conditionality value="false"/> <requirement value="The system SHALL provide the ability to log system maintenance events for entry to, and exit from, the EHR system."/> <derivedFrom value="TI.2.1.3#7"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="false"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.2.1.3-08"/> <label value="TI.2.1.3#08"/> <conformance value="SHALL"/> <conditionality value="false"/> <requirement value="The system SHALL provide the ability to log system maintenance events for remote access connections including those for system support and maintenance activities for security and access purposes."/> <derivedFrom value="TI.2.1.3#8"/> </statement> </Requirements>

Description I:

System Audit Triggers are designed to capture system related events, both routine and exceptional, including key metadata (who, what, when, where, why).

Criteria N:

TI.2.1.3#01

SHOULD

The system SHOULD provide the ability to log system maintenance events for loading new versions of, or changes to, the clinical system.

TI.2.1.3#02

SHOULD

The system SHOULD provide the ability to store system maintenance events for loading new versions of codes and knowledge bases.

TI.2.1.3#03

SHOULD

The system SHOULD provide the ability to log system maintenance events for creating and restoring of backup.

TI.2.1.3#04

SHOULD

The system SHOULD provide the ability to audit events in the case of detection of corrupt or dirty data.

TI.2.1.3#05

SHALL

The system SHALL provide the ability to audit the access and usage of systems, data, and organizational resources.

TI.2.1.3#06

SHALL

The system SHALL provide the ability to log system events at the hardware and software architecture level.

TI.2.1.3#07

SHALL

The system SHALL provide the ability to log system maintenance events for entry to, and exit from, the EHR system.

TI.2.1.3#08

SHALL

The system SHALL provide the ability to log system maintenance events for remote access connections including those for system support and maintenance activities for security and access purposes.