The product lets an authorised clinical user reach protected health data and the software's essential performance in an emergency requiring immediate access when personal identification and authentication are unavailable (break-glass). Emergency access is detected, recorded and reported, ideally with the administrator or medical staff alerted at once as well as the audit entry; it requires and records self-attested user identification without authentication; the HDO can meet the need procedurally through a specific account or system function; the administrator can enable or disable the emergency functions according to the technical or procedural controls required; and the HDO defines the emergency conditions for use, for example in its business continuity plan.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.