data collected and potentially used to facilitate a security audit, to include the who (login ID), what (read-only, modify, delete, add, etc.), and when (date/timestan1p).

the mechanisms employed to record and examine system activity.

permission granted by the patient or the patient's personal representative to use or disclose protected health information for purposes other than treatment, payment, health care operations or us [..]

the ability or the means necessary to read, write, modify, or communicate data/information or otherwise make use of any system resource.

A method of restricting access to resources, allowing only privileged entities access. (PGP, Inc.) Types of access control include, an1Ong others, mandatory access control, discretionary access contro [..]

The protection of sensitive communications transmissions over open or private networks so that it cannot be easily intercepted and interpreted by parties other than the intended recipient.

A level associated with an individual who may be accessing information (for exan1ple, a clearance level) or with the information that may be accessed (for example, a classification level).

The property that ensures that the actions of an entity can be traced uniquely to that entity. (ASTM E1762 -95). (#)

A person who on behalf of a covered entity (or of an organized health care arrangement in which the covered entity participates) performs, or assists in the performance of:

An identification system that identifies a human from a measurement of a physical feature or repeatable action of the individual, such as, hand geometry, retinal scan, iris scan, fingerprint patterns, [..]