Basic Audit Log Patterns (BALP), published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 1.1.4-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/IHE/ITI.BasicAudit/ and changes regularly. See the Directory of published versions

Basic Audit Log Patterns (BALP)

Official URL: https://profiles.ihe.net/ITI/BALP/ImplementationGuide/ihe.iti.balp				Version: 1.1.4-current
Active as of 2024-11-14				Computable Name: IHE_ITI_BALP

The Basic Audit Log Patterns (BALP) Implementation Guide is a Content Profile that defines some basic and reusable AuditEvent patterns. This includes basic audit log profiles for FHIR RESTful operations to be used when there is not a more specific audit event defined. A focus is on enabling Privacy centric AuditEvent logs that hold well-formed indication of the Patient when they are the subject of the activity being recorded in the log. Where a more specific audit event can be defined, it should be derived off of these basic patterns.

Organization of This Guide

This guide is organized into following main sections:

• Volume 1: Profiles
  • BasicAudit Introduction
  • BasicAudit Actors and Content
  • BasicAudit Actor Options
  • BasicAudit Required Groupings
  • BasicAudit Overview
  • BasicAudit Security Considerations
  • BasicAudit Cross-Profile Considerations
• Volume 3: Content Section
  • Basic Audit Log Patterns
    • Scope
    • Content
    • RESTful activities
    • SAML Security Token
    • OAuth Security Token
    • Consent Authorized Decision Audit Message
    • Privacy Disclosure Audit Message
• Artifacts
• Other:
  • Changes to Other IHE Specifications
  • Download and Analysis
  • AuditEvent Use in IHE Profiles
  • Test Plan

See also the Table of Contents and the index of Artifacts defined as part of this implementation guide.

Conformance Expectations

IHE uses the normative words Shall, Should, and May according to standards conventions.

Must Support

The use of mustSupport in StructureDefinition profiles equivalent to the IHE use of R2 as defined in Appendix Z.

mustSupport of true - only has a meaning on items that are minimal cardinality of zero (0), and applies only to the source actor populating the data. The source actor shall populate the elements marked with MustSupport, if the concept is supported by the actor, a value exists, and security and consent rules permit. The consuming actors should handle these elements being populated or being absent/empty. Note that sometimes mustSupport will appear on elements with a minimal cardinality greater than zero (0), this is due to inheritance from a less constrained profile.