The product reliably audits who does what with health data, following public frameworks such as the IHE Audit Trail and Node Authentication profile so that an HDO security officer can monitor activity, assess compliance with policy, detect non-compliant behaviour and detect improper creation, access, modification or deletion of protected health information. Audit trails record system and health data access, modification and deletion and any configuration change affecting security or privacy controls; logs are kept locally or, when so configured, sent to an HDO-managed central repository; review tools support creation and maintenance; audit data cannot be edited or deleted and, because it often contains personal or health data, its access, storage and transfer are controlled.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.