Audit Controls
Please click on the link to read the following article:AHIMA, “Security Audits of Electronic Health Information (Updated).” Journal of AHIMA 82, no. 3 (March 2011): 46-50.Link to articleAfter reading the article, review the sections on Technical Safeguards, including Access Control and Audit Controls in this module’s reading assignment. The author states that audit controls are “‘hardware, software, and /or procedural mechanisms that record and examine activity in information systems.’ Most information systems provide some level of audit controls and audit reports. These are useful, especially when determining if a security violation occurred” (Gartee, p. 404).Next, review the information presented below.DateLog InPt #Pt TypeLog outPatient NameJWARD01-05-1108:001223Surg08:17Olson09:205776Surg09:24Williams09:263987Surg09:45JohnsonSWILLIAMS01-05-1108:053463Radiology08:08Finch08:355776Surg09:02Williams09:031234Radiology09:07JonesLWORLEY01-05-1108:055776Surg08:15Williams08:329874Medical08:55Smith09:151223Surg09:24OlsonThis data was pulled to view a general login and logout pattern in the EHR for hospital staff on the morning listed above (01-05-11). Below are descriptions of these staff members’ positions.J Ward is a nurse who works in the general surgery floor.S Williams is a registration clerk who works in the Radiology department.L Worley is a Health Information clerk who processes requests for records from other healthcare providers and facilities.Given this information, how would you respond to the audit? Do the staff members’ logins seem appropriate? What would you question? Your response to this audit should be a one-two page document (4-5 paragraphs) to provide a complete response to the audit results based on each of the roles.
