Case study: Auditing for compliance
Consider auditing in the context of a healthcare information management system. The system provides appointment scheduling, patient record management, prescription management, and more. Healthcare information is among the most sensitive personal information that exists and must be handled with care to ensure the highest standards of data security, integrity, and privacy. Regulations such as the Health Insurance Portability and Accountability Act (HIPAA) codify this need. Auditing for such a system must do the following:
- Track access and modifications to patient records
- Monitor the actions of all admin users
- Ensure compliance with data privacy regulations and standards
- Enable quick investigation and response to suspicious activity
Given the preceding requirements, a sound auditing strategy might include the following features:
- Configuration and filtering:
- Filters to audit CRUD operations...
