AssertionManagerGui

Id scheme	Assertion id	Status	Testable?	#Coverage	#Applies to	Predicate	Page	Tags	Last changed

CH-ATC	CH-ATC-001	to be reviewed	Testable	1	4	The Patient Audit Consumer MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)	33	Section 2.2	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-002	to be reviewed	Testable	2	4	The Patient Audit Record Repository MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)	33	Section 2.2	3/8/24 11:01:37 AM by vhofman
CH-ATC	CH-ATC-005	to be reviewed	Testable	3	2	ThePatientAuditRecordRepositoryshallsupporttheRetrieveAuditMessageOptionfromtheAuditRecordRepository(ITITF-1:9.2.3)with the search capabilities as defined in ITI TF-2c: 3.81 and the Audit Message Formats defined in Volume 3 - Content Profiles (see Section 2.2.2 Patient Audit Record Repository)	33	Section 2.2.2	3/8/24 11:01:40 AM by vhofman
CH-ATC	CH-ATC-018	to be reviewed	Testable	1	4	The Patient Audit Consumer MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)	33	Section 2.6	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-019	to be reviewed	Testable	3	4	The Patient Audit Record Repository MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)	33	Section 2.6	3/8/24 11:01:45 AM by vhofman
CH-ATC	CH-ATC-020	to be reviewed	Testable	1	2	The Retrieve ATNA Audit Event message shall be a HTTP GET request sent to the Patient Audit Record Repository (see Section 3.1.1 MessageSemantics)	8	Section 3.1.1	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-021	to be reviewed	Testable	1	1	The Retrieve ATNA Audit Event message MUST use https scheme (see Section 3.1.1 MessageSemantics)	8	Section 3.1.1	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-022	reviewed	Testable	2	1	The Retrieve ATNA Audit Event message MUST include the entity-id (see Section 3.1.1 Message Semantics)	8	Section 3.1.1	3/8/24 11:01:54 AM by vhofman
CH-ATC	CH-ATC-023	reviewed	Testable	1	2	The Retrieve ATNA Audit Event message does not contain the entity-id, an HTTP response code 400 - Bad Request MUST be returned (see Section 3.1.1 Message Semantics)	8	Section 3.1.1	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-024	reviewed	Testable	3	3	The Patient Audit Record Repository MUST match the entity-id parameter with the AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)	8	Section 3.1.2	3/8/24 11:01:57 AM by vhofman
CH-ATC	CH-ATC-025	reviewed	Testable	3	3	The Patient Audit Record Repository MUST NOT match the entity-id parameter with any other parameter than AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)	8	Section 3.1.2	3/8/24 11:02:00 AM by vhofman
CH-ATC	CH-ATC-026	reviewed	Testable	2	1	The entity-id parameter MUST be the patient EPR-SPID (see Section 3.1.2 Additional ATNA Search Parameters)	8	Section 3.1.2	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-041	reviewed	Testable	2	1	Audit Event related to Document Management MUST contain data elements described in table 5 (see Section 4.2 Document Audit Event Content Profile)	11	Section 4.2	3/8/24 11:02:10 AM by vhofman
CH-ATC	CH-ATC-043	reviewed	Testable	2	1	Audit Event related to Policy Management MUST contain data elements described in table 9 (see Section 4.3 Policy Audit Event Content Profile)	19	Section 4.3	3/8/24 11:02:13 AM by vhofman
CH-ATC	CH-ATC-045	reviewed	Testable	2	1	Audit Event related to Accessing the Audit Trail of a Patient from a Patient Audit Record Repository MUST contain data elements described in table 14 (see Section 4.4 Access Audit Trail Content Profile)	25	Section 4.4	3/8/24 11:02:16 AM by vhofman

to be reviewed

Testable

The Patient Audit Consumer MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)

33

Section 2.2

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-002

to be reviewed

Testable

2

4

The Patient Audit Record Repository MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)

33

Section 2.2

3/8/24 11:01:37 AM by vhofman

CH-ATC

CH-ATC-005

to be reviewed

Testable

3

2

ThePatientAuditRecordRepositoryshallsupporttheRetrieveAuditMessageOptionfromtheAuditRecordRepository(ITITF-1:9.2.3)with the search capabilities as defined in ITI TF-2c: 3.81 and the Audit Message Formats defined in Volume 3 - Content Profiles (see Section 2.2.2 Patient Audit Record Repository)

33

Section 2.2.2

3/8/24 11:01:40 AM by vhofman

CH-ATC

CH-ATC-018

to be reviewed

Testable

1

4

The Patient Audit Consumer MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)

33

Section 2.6

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-019

to be reviewed

Testable

3

4

The Patient Audit Record Repository MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)

33

Section 2.6

3/8/24 11:01:45 AM by vhofman

CH-ATC

CH-ATC-020

to be reviewed

Testable

1

2

The Retrieve ATNA Audit Event message shall be a HTTP GET request sent to the Patient Audit Record Repository (see Section 3.1.1 MessageSemantics)

8

Section 3.1.1

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-021

to be reviewed

Testable

1

The Retrieve ATNA Audit Event message MUST use https scheme (see Section 3.1.1 MessageSemantics)

8

Section 3.1.1

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-022

reviewed

Testable

2

1

The Retrieve ATNA Audit Event message MUST include the entity-id (see Section 3.1.1 Message Semantics)

8

Section 3.1.1

3/8/24 11:01:54 AM by vhofman

CH-ATC

CH-ATC-023

reviewed

Testable

1

2

The Retrieve ATNA Audit Event message does not contain the entity-id, an HTTP response code 400 - Bad Request MUST be returned (see Section 3.1.1 Message Semantics)

8

Section 3.1.1

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-024

reviewed

Testable

3

The Patient Audit Record Repository MUST match the entity-id parameter with the AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)

8

Section 3.1.2

3/8/24 11:01:57 AM by vhofman

CH-ATC

CH-ATC-025

reviewed

Testable

3

The Patient Audit Record Repository MUST NOT match the entity-id parameter with any other parameter than AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)

8

Section 3.1.2

3/8/24 11:02:00 AM by vhofman

CH-ATC

CH-ATC-026

reviewed

Testable

2

1

The entity-id parameter MUST be the patient EPR-SPID (see Section 3.1.2 Additional ATNA Search Parameters)

8

Section 3.1.2

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-041

reviewed

Testable

2

1

Audit Event related to Document Management MUST contain data elements described in table 5 (see Section 4.2 Document Audit Event Content Profile)

11

Section 4.2

3/8/24 11:02:10 AM by vhofman

CH-ATC

CH-ATC-043

reviewed

Testable

2

1

Audit Event related to Policy Management MUST contain data elements described in table 9 (see Section 4.3 Policy Audit Event Content Profile)

19

Section 4.3

3/8/24 11:02:13 AM by vhofman

CH-ATC

CH-ATC-045

reviewed

Testable

2

1

Audit Event related to Accessing the Audit Trail of a Patient from a Patient Audit Record Repository MUST contain data elements described in table 14 (see Section 4.4 Access Audit Trail Content Profile)

25

Section 4.4

3/8/24 11:02:16 AM by vhofman

Search Criteria : 15 assertions found for this search Review filtered assertions

Assertion

Applies to

Coverage