Basic Audit Log Patterns (BALP)
1.1.4-current - ci-build International flag

Basic Audit Log Patterns (BALP), published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 1.1.4-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/IHE/ITI.BasicAudit/ and changes regularly. See the Directory of published versions

Example AuditEvent: Audit Example of a basic Authorization Deny access

Generated Narrative: AuditEvent ex-auditAuthZconsent-deny

type: DICOM Controlled Terminology Definitions 110113: Security Alert

subtype: Authorization subType events AuthZ-Consent: Authorization Decision using Roles and Consent

action: Execute

recorded: 2021-12-27 09:49:00+0000

outcome: Serious failure

outcomeDesc: Consent denied access to this user

agent

type: Application

who: Device

requestor: false

Networks

-AddressType
*2001:0db8:85a3:0000:0000:8a2e:0370:7334IP Address

agent

type: information recipient

who: Practitioner: telecom = JohnMoehrke@gmail.com

requestor: true

purposeOfUse: patient requested

agent

type: healthcare provider

who: Organization nowhere

requestor: false

agent

type: Authorization Server

who: Device

requestor: false

Sources

-SiteObserverType
*server.example.comDeviceAudit Event Source Type 6: Security Server

entity

what: John Schmidt Other, DoB: 1923-07-25

type: Audit event entity type 1: Person

role: AuditEventEntityRole 1: Patient

entity

what: Consent: status = active; scope = Privacy Consent; category = Privacy policy acknowledgment Document

type: ResourceType Consent: Consent