Absolutely!
Kris Owens
923-8108
"There is no meaning in isolation"
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 08, 2002 11:41 AM
To: [EMAIL PROTECTED]
Subject: Re: Logging Record Access in Transaction Systems
Kris,
Will you keep our answers confidential? I'd rather not have them posted
publicly.
David Hays
Rural Metro Corp.
Corp. IS., HIPAA TaCS Lead P/A
Scottsdale, AZ 85251
480 606 3522
"Owens, Kris" <[EMAIL PROTECTED]> on 07/08/2002 10:04:58 AM
Please respond to <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
cc:
Subject: Logging Record Access in Transaction Systems
Logging Record Access in Transaction Systems
In our regional SNIP organization we are having a discussion about the
logging of user's access to records in transaction systems and I would like
to ask other organizations around the country what their plans are.� I
appreciate your feedback.
Definition:
Full Logging: This is when a computer application (like a physician billing
or claims processing system)� writes a record to a separate log or audit
file every time a user adds, changes, deletes, or inquires a record.� The
user access could occur either on-line using a screen, or through a batch
process.� Generally, log records include, the operator id of the person
that accessed the record, date and time the record was accessed, and a
before and after image of the record, or the fields that were changed.
Full Logging is not� when an application stamps a record with Operator ID,
date and time each time it is added, changed or deleted.
Questions:
1.� Are your systems capable of doing "full logging"?
2.� Does your organization currently have "full logging" turned on?� For
adds, changes, deletes and inquires?� Batch, on-line or both?
3.� What has been the impact to your overall system, has it impacted
response time, disk resources etc?
4.� If you have logging turned on, do you have someone monitoring the log
file?� Is this a full time job?� How are you using the log data?
5.� If your organization doesn't have full logging turned on do you plan on
turning it on?� When?
6.� Will you have to upgrade your current system, customize it, or buy an
additional product to get full logging capability?� Do you plan to?
7.� If you are currently doing full logging, or plan on doing it in the
future, what is your justification for doing full logging?� What are your
anticipated outcomes?
8.� If you are not doing full logging and do not plan on doing it in the
future, what is your justification for not doing full logging?
Kris Owens
Senior IS Project Manager - HIPAA Project
Presbyterian Healthcare Services
Albuquerque, NM
505.923.8108
[EMAIL PROTECTED]
"There is no meaning in isolation"
**********************************************************************
To be removed from this list, send a message to:
[EMAIL PROTECTED]
Please note that it may take up to 72 hours to process your request.
===========================
The WEDI SNIP listserv to which you are subscribed is not moderated. The
discussions on this listserv therefore represent the views of the
individual participants, and do not necessarily represent the views of the
WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official
opinion, post your question to the WEDI SNIP Issues Database at
http://snip.wedi.org/tracking/.
Posting of advertisements or other commercial use of this listserv is
specifically prohibited.
**********************************************************************
To be removed from this list, send a message to: [EMAIL PROTECTED]
Please note that it may take up to 72 hours to process your request.
=====================================================The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/.
Posting of advertisements or other commercial use of this listserv is specifically prohibited.
**********************************************************************
To be removed from this list, send a message to: [EMAIL PROTECTED]
Please note that it may take up to 72 hours to process your request.
=====================================================
The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/.
Posting of advertisements or other commercial use of this listserv is specifically prohibited.
--- PRESBYTERIAN HEALTHCARE SERVICES DISCLAIMER ---
This message originates from Presbyterian Healthcare Services or one of its affiliated organizations. It contains information, which may be confidential or privileged, and is intended only for the individual or entity named above. It is prohibited for anyone else to disclose, copy, distribute or use the contents of this message. All personal messages express views solely of the sender, which are not to be attributed to Presbyterian Healthcare Services or any of its affiliated organizations, and may not be distributed without this disclaimer. If you received this message in error, please notify us immediately at [EMAIL PROTECTED]
