Release 5 Preview #3

4.4.1.562 Value Set http://hl7.org/fhir/ValueSet/audit-event-sub-type

Security Work Group Maturity Level: 3Trial Use Use Context: Any

This is a value set defined by the FHIR project.

Summary

Defining URL:http://hl7.org/fhir/ValueSet/audit-event-sub-type
Version:4.5.0
Name:AuditEventSub-Type
Title:Audit Event Sub-Type
Definition:

More detailed code concerning the type of the audit event - defined by DICOM with some additional FHIR, HL7, and other additions.

Committee:Security Work Group
OID:2.16.840.1.113883.4.642.3.464 (for OID based terminology systems)
Copyright:

These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical Manufacturers Association. Additional codes added by HL7 FHIR use-case analysis

Source ResourceXML / JSON

This value set is used in the following places:


This value set includes codes based on the following rules:

 

This expansion generated 25 Sep 2020


This value set contains 76 concepts

Expansion based on:

CodeSystemDisplayDefinition
110120http://dicom.nema.org/resources/ontology/DCMApplication StartAudit event: Application Entity has started
110121http://dicom.nema.org/resources/ontology/DCMApplication StopAudit event: Application Entity has stopped
110122http://dicom.nema.org/resources/ontology/DCMLoginAudit event: User login has been attempted
110123http://dicom.nema.org/resources/ontology/DCMLogoutAudit event: User logout has been attempted
110124http://dicom.nema.org/resources/ontology/DCMAttachAudit event: Node has been attached
110125http://dicom.nema.org/resources/ontology/DCMDetachAudit event: Node has been detached
110126http://dicom.nema.org/resources/ontology/DCMNode AuthenticationAudit event: Node Authentication has been attempted
110127http://dicom.nema.org/resources/ontology/DCMEmergency Override StartedAudit event: Emergency Override has started
110128http://dicom.nema.org/resources/ontology/DCMNetwork ConfigurationAudit event: Network configuration has been changed
110129http://dicom.nema.org/resources/ontology/DCMSecurity ConfigurationAudit event: Security configuration has been changed
110130http://dicom.nema.org/resources/ontology/DCMHardware ConfigurationAudit event: Hardware configuration has been changed
110131http://dicom.nema.org/resources/ontology/DCMSoftware ConfigurationAudit event: Software configuration has been changed
110132http://dicom.nema.org/resources/ontology/DCMUse of Restricted FunctionAudit event: A use of a restricted function has been attempted
110133http://dicom.nema.org/resources/ontology/DCMAudit Recording StoppedAudit event: Audit recording has been stopped
110134http://dicom.nema.org/resources/ontology/DCMAudit Recording StartedAudit event: Audit recording has been started
110135http://dicom.nema.org/resources/ontology/DCMObject Security Attributes ChangedAudit event: Security attributes of an object have been changed
110136http://dicom.nema.org/resources/ontology/DCMSecurity Roles ChangedAudit event: Security roles have been changed
110137http://dicom.nema.org/resources/ontology/DCMUser security Attributes ChangedAudit event: Security attributes of a user have been changed
110138http://dicom.nema.org/resources/ontology/DCMEmergency Override StoppedAudit event: Emergency Override has Stopped
110139http://dicom.nema.org/resources/ontology/DCMRemote Service Operation StartedAudit event: Remote Service Operation has Begun
110140http://dicom.nema.org/resources/ontology/DCMRemote Service Operation StoppedAudit event: Remote Service Operation has Stopped
110141http://dicom.nema.org/resources/ontology/DCMLocal Service Operation StartedAudit event: Local Service Operation has Begun
110142http://dicom.nema.org/resources/ontology/DCMLocal Service Operation StoppedAudit event: Local Service Operation Stopped
readhttp://hl7.org/fhir/restful-interactionreadRead the current state of the resource.
vreadhttp://hl7.org/fhir/restful-interactionvreadRead the state of a specific version of the resource.
updatehttp://hl7.org/fhir/restful-interactionupdateUpdate an existing resource by its id (or create it if it is new).
patchhttp://hl7.org/fhir/restful-interactionpatchUpdate an existing resource by posting a set of changes to it.
deletehttp://hl7.org/fhir/restful-interactiondeleteDelete a resource.
historyhttp://hl7.org/fhir/restful-interactionhistoryRetrieve the change history for a particular resource, type of resource, or the entire system.
history-instancehttp://hl7.org/fhir/restful-interactionhistory-instanceRetrieve the change history for a particular resource.
history-typehttp://hl7.org/fhir/restful-interactionhistory-typeRetrieve the change history for all resources of a particular type.
history-systemhttp://hl7.org/fhir/restful-interactionhistory-systemRetrieve the change history for all resources on a system.
createhttp://hl7.org/fhir/restful-interactioncreateCreate a new resource with a server assigned id.
searchhttp://hl7.org/fhir/restful-interactionsearchSearch a resource type or all resources based on some filter criteria.
search-typehttp://hl7.org/fhir/restful-interactionsearch-typeSearch all resources of the specified type based on some filter criteria.
search-systemhttp://hl7.org/fhir/restful-interactionsearch-systemSearch all resources based on some filter criteria.
capabilitieshttp://hl7.org/fhir/restful-interactioncapabilitiesGet a Capability Statement for the system.
transactionhttp://hl7.org/fhir/restful-interactiontransactionUpdate, create or delete a set of resources as a single transaction.
batchhttp://hl7.org/fhir/restful-interactionbatchperform a set of a separate interactions in a single http operation
operationhttp://hl7.org/fhir/restful-interactionoperationPerform an operation as defined by an OperationDefinition.
documenthttp://hl7.org/fhir/bundle-typeDocumentThe bundle is a document. The first resource is a Composition.
messagehttp://hl7.org/fhir/bundle-typeMessageThe bundle is a message. The first resource is a MessageHeader.
transactionhttp://hl7.org/fhir/bundle-typeTransactionThe bundle is a transaction - intended to be processed by a server as an atomic commit.
transaction-responsehttp://hl7.org/fhir/bundle-typeTransaction ResponseThe bundle is a transaction response. Because the response is a transaction response, the transaction has succeeded, and all responses are error free.
batchhttp://hl7.org/fhir/bundle-typeBatchThe bundle is a set of actions - intended to be processed by a server as a group of independent actions.
batch-responsehttp://hl7.org/fhir/bundle-typeBatch ResponseThe bundle is a batch response. Note that as a batch, some responses may indicate failure and others success.
historyhttp://hl7.org/fhir/bundle-typeHistory ListThe bundle is a list of resources from a history interaction on a server.
searchsethttp://hl7.org/fhir/bundle-typeSearch ResultsThe bundle is a list of resources returned as a result of a search/query interaction, operation, or message.
collectionhttp://hl7.org/fhir/bundle-typeCollectionThe bundle is a set of resources collected into a single package for ease of distribution that imposes no processing obligations or behavioral rules beyond persistence.
access http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAccess/View Record Lifecycle EventOccurs when an agent causes the system to obtain and open a record entry for inspection or review.
hold http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAdd Legal Hold Record Lifecycle EventOccurs when an agent causes the system to tag or otherwise indicate special access management and suspension of record entry deletion/destruction, if deemed relevant to a lawsuit or which are reasonably anticipated to be relevant or to fulfill organizational policy under the legal doctrine of “duty to preserve”.
amend http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAmend (Update) Record Lifecycle EventOccurs when an agent makes any change to record entry content currently residing in storage considered permanent (persistent).
archive http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleArchive Record Lifecycle EventOccurs when an agent causes the system to create and move archive artifacts containing record entry content, typically to long-term offline storage.
attest http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAttest Record Lifecycle EventOccurs when an agent causes the system to capture the agent’s digital signature (or equivalent indication) during formal validation of record entry content.
decrypt http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDecrypt Record Lifecycle EventOccurs when an agent causes the system to decode record entry content from a cipher.
deidentify http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDe-Identify (Anononymize) Record Lifecycle EventOccurs when an agent causes the system to scrub record entry content to reduce the association between a set of identifying data and the data subject in a way that might or might not be reversible.
deprecate http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDeprecate Record Lifecycle EventOccurs when an agent causes the system to tag record entry(ies) as obsolete, erroneous or untrustworthy, to warn against its future use.
destroy http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDestroy/Delete Record Lifecycle EventOccurs when an agent causes the system to permanently erase record entry content from the system.
disclose http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDisclose Record Lifecycle EventOccurs when an agent causes the system to release, transfer, provision access to, or otherwise divulge record entry content.
encrypt http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleEncrypt Record Lifecycle EventOccurs when an agent causes the system to encode record entry content in a cipher.
extract http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleExtract Record Lifecycle EventOccurs when an agent causes the system to selectively pull out a subset of record entry content, based on explicit criteria.
link http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleLink Record Lifecycle EventOccurs when an agent causes the system to connect related record entries.
merge http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleMerge Record Lifecycle EventOccurs when an agent causes the system to combine or join content from two or more record entries, resulting in a single logical record entry.
originate http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleOriginate/Retain Record Lifecycle EventOccurs when an agent causes the system to: a) initiate capture of potential record content, and b) incorporate that content into the storage considered a permanent part of the health record.
pseudonymize http://terminology.hl7.org/CodeSystem/iso-21089-lifecyclePseudonymize Record Lifecycle EventOccurs when an agent causes the system to remove record entry content to reduce the association between a set of identifying data and the data subject in a way that may be reversible.
reactivate http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRe-activate Record Lifecycle EventOccurs when an agent causes the system to recreate or restore full status to record entries previously deleted or deprecated.
receive http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleReceive/Retain Record Lifecycle EventOccurs when an agent causes the system to a) initiate capture of data content from elsewhere, and b) incorporate that content into the storage considered a permanent part of the health record.
reidentify http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRe-identify Record Lifecycle EventOccurs when an agent causes the system to restore information to data that allows identification of information source and/or information subject.
unhold http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRemove Legal Hold Record Lifecycle EventOccurs when an agent causes the system to remove a tag or other cues for special access management had required to fulfill organizational policy under the legal doctrine of “duty to preserve”.
report http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleReport (Output) Record Lifecycle EventOccurs when an agent causes the system to produce and deliver record entry content in a particular form and manner.
restore http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRestore Record Lifecycle EventOccurs when an agent causes the system to recreate record entries and their content from a previous created archive artefact.
transform http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleTransform/Translate Record Lifecycle EventOccurs when an agent causes the system to change the form, language or code system used to represent record entry content.
transmit http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleTransmit Record Lifecycle EventOccurs when an agent causes the system to send record entry content from one (EHR/PHR/other) system to another.
unlink http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleUnlink Record Lifecycle EventOccurs when an agent causes the system to disconnect two or more record entries previously connected, rendering them separate (disconnected) again.
unmerge http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleUnmerge Record Lifecycle EventOccurs when an agent causes the system to reverse a previous record entry merge operation, rendering them separate again.
verify http://terminology.hl7.org/CodeSystem/iso-21089-lifecycleVerify Record Lifecycle EventOccurs when an agent causes the system to confirm compliance of data or data objects with regulations, requirements, specifications, or other imposed conditions based on organizational policy.

 

See the full registry of value sets defined as part of FHIR.


Explanation of the columns that may appear on this page:

LvlA few code lists that FHIR defines are hierarchical - each code is assigned a level. For value sets, levels are mostly used to organize codes for user convenience, but may follow code system hierarchy - see Code System for further information
SourceThe source of the definition of the code (when the value set draws in codes defined elsewhere)
CodeThe code (used as the code in the resource instance). If the code is in italics, this indicates that the code is not selectable ('Abstract')
DisplayThe display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application
DefinitionAn explanation of the meaning of the concept
CommentsAdditional notes about how to use the code