AssertionManagerGui

Id scheme	Assertion id	Status	Testable?	#Coverage	#Applies to	Predicate	Page	Tags	Last changed
1 2
CH-ATC	CH-ATC-001	to be reviewed	Testable	1	4	The Patient Audit Consumer MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)	33	Section 2.2	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-002	to be reviewed	Testable	2	4	The Patient Audit Record Repository MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)	33	Section 2.2	3/8/24 11:01:37 AM by vhofman
CH-ATC	CH-ATC-005	to be reviewed	Testable	3	2	ThePatientAuditRecordRepositoryshallsupporttheRetrieveAuditMessageOptionfromtheAuditRecordRepository(ITITF-1:9.2.3)with the search capabilities as defined in ITI TF-2c: 3.81 and the Audit Message Formats defined in Volume 3 - Content Profiles (see Section 2.2.2 Patient Audit Record Repository)	33	Section 2.2.2	3/8/24 11:01:40 AM by vhofman
CH-ATC	CH-ATC-010	to be reviewed	Testable	1	3	The Patient Audit Consumer MUST be grouped with actor : CH:ATNA - Secure Node (see Table 3 Actor Grouping)	33	Section 2.4	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-011	to be reviewed	Testable	1	2	The Patient Audit Consumer MUST be grouped with actor : CH:CT - Time Client (see Section Table 3 Actor Grouping)	33	Section 2.4	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-012	to be reviewed	Testable	1	3	The Patient Audit Consumer MUST be grouped with actor : IUA - Authorization Client (see Table 3 Actor Grouping)	33	Section 2.4	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-014	to be reviewed	Testable	1	3	The Patient Audit Record Repository MUST be grouped with actor : CH:ATNA - Secure Node (see Table 3 Actor Grouping)	33	Section 2.4	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-015	to be reviewed	Testable	1	3	The Patient Audit Record Repository MUST be grouped with actor : CH:CT Time Client (see Table 3 Actor Grouping)	33	Section 2.4	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-016	to be reviewed	Testable	1	3	The Patient Audit Reciord Repository MUST be grouped with actor : CH:ADR - Authorization Decision Consumer (see Table 3 Actor Grouping)	33	Section 2.4	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-017	to be reviewed	Testable	1	3	The Patient Audit Record Repository MUST be grouped with actor : IUA - Resource Server (see Table 3 Actor Grouping)	33	Section 2.4	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-018	to be reviewed	Testable	1	4	The Patient Audit Consumer MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)	33	Section 2.6	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-019	to be reviewed	Testable	3	4	The Patient Audit Record Repository MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)	33	Section 2.6	3/8/24 11:01:45 AM by vhofman
CH-ATC	CH-ATC-020	to be reviewed	Testable	1	2	The Retrieve ATNA Audit Event message shall be a HTTP GET request sent to the Patient Audit Record Repository (see Section 3.1.1 MessageSemantics)	8	Section 3.1.1	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-021	to be reviewed	Testable	1	1	The Retrieve ATNA Audit Event message MUST use https scheme (see Section 3.1.1 MessageSemantics)	8	Section 3.1.1	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-022	reviewed	Testable	2	1	The Retrieve ATNA Audit Event message MUST include the entity-id (see Section 3.1.1 Message Semantics)	8	Section 3.1.1	3/8/24 11:01:54 AM by vhofman
CH-ATC	CH-ATC-023	reviewed	Testable	1	2	The Retrieve ATNA Audit Event message does not contain the entity-id, an HTTP response code 400 - Bad Request MUST be returned (see Section 3.1.1 Message Semantics)	8	Section 3.1.1	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-024	reviewed	Testable	3	3	The Patient Audit Record Repository MUST match the entity-id parameter with the AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)	8	Section 3.1.2	3/8/24 11:01:57 AM by vhofman
CH-ATC	CH-ATC-025	reviewed	Testable	3	3	The Patient Audit Record Repository MUST NOT match the entity-id parameter with any other parameter than AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)	8	Section 3.1.2	3/8/24 11:02:00 AM by vhofman
CH-ATC	CH-ATC-026	reviewed	Testable	2	1	The entity-id parameter MUST be the patient EPR-SPID (see Section 3.1.2 Additional ATNA Search Parameters)	8	Section 3.1.2	3/15/24 2:33:35 PM by aeschlimann
CH-ATC	CH-ATC-041	reviewed	Testable	2	1	Audit Event related to Document Management MUST contain data elements described in table 5 (see Section 4.2 Document Audit Event Content Profile)	11	Section 4.2	3/8/24 11:02:10 AM by vhofman

to be reviewed

Testable

The Patient Audit Consumer MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)

33

Section 2.2

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-002

to be reviewed

Testable

2

4

The Patient Audit Record Repository MUST implement Retrieve ATNA Audit Event transaction (ITI-81) (see Table 1 : CH:ATC Profile - Actors and Transactions)

33

Section 2.2

3/8/24 11:01:37 AM by vhofman

CH-ATC

CH-ATC-005

to be reviewed

Testable

3

2

ThePatientAuditRecordRepositoryshallsupporttheRetrieveAuditMessageOptionfromtheAuditRecordRepository(ITITF-1:9.2.3)with the search capabilities as defined in ITI TF-2c: 3.81 and the Audit Message Formats defined in Volume 3 - Content Profiles (see Section 2.2.2 Patient Audit Record Repository)

33

Section 2.2.2

3/8/24 11:01:40 AM by vhofman

CH-ATC

CH-ATC-010

to be reviewed

Testable

1

3

The Patient Audit Consumer MUST be grouped with actor : CH:ATNA - Secure Node (see Table 3 Actor Grouping)

33

Section 2.4

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-011

to be reviewed

Testable

1

2

The Patient Audit Consumer MUST be grouped with actor : CH:CT - Time Client (see Section Table 3 Actor Grouping)

33

Section 2.4

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-012

to be reviewed

Testable

1

3

The Patient Audit Consumer MUST be grouped with actor : IUA - Authorization Client (see Table 3 Actor Grouping)

33

Section 2.4

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-014

to be reviewed

Testable

1

3

The Patient Audit Record Repository MUST be grouped with actor : CH:ATNA - Secure Node (see Table 3 Actor Grouping)

33

Section 2.4

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-015

to be reviewed

Testable

1

3

The Patient Audit Record Repository MUST be grouped with actor : CH:CT Time Client (see Table 3 Actor Grouping)

33

Section 2.4

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-016

to be reviewed

Testable

1

3

The Patient Audit Reciord Repository MUST be grouped with actor : CH:ADR - Authorization Decision Consumer (see Table 3 Actor Grouping)

33

Section 2.4

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-017

to be reviewed

Testable

1

3

The Patient Audit Record Repository MUST be grouped with actor : IUA - Resource Server (see Table 3 Actor Grouping)

33

Section 2.4

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-018

to be reviewed

Testable

1

4

The Patient Audit Consumer MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)

33

Section 2.6

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-019

to be reviewed

Testable

3

4

The Patient Audit Record Repository MUST implement Incorporate Authorization Token transaction (ITI-72) (see Section 2.6 Security Considerations)

33

Section 2.6

3/8/24 11:01:45 AM by vhofman

CH-ATC

CH-ATC-020

to be reviewed

Testable

1

2

The Retrieve ATNA Audit Event message shall be a HTTP GET request sent to the Patient Audit Record Repository (see Section 3.1.1 MessageSemantics)

8

Section 3.1.1

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-021

to be reviewed

Testable

1

The Retrieve ATNA Audit Event message MUST use https scheme (see Section 3.1.1 MessageSemantics)

8

Section 3.1.1

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-022

reviewed

Testable

2

1

The Retrieve ATNA Audit Event message MUST include the entity-id (see Section 3.1.1 Message Semantics)

8

Section 3.1.1

3/8/24 11:01:54 AM by vhofman

CH-ATC

CH-ATC-023

reviewed

Testable

1

2

The Retrieve ATNA Audit Event message does not contain the entity-id, an HTTP response code 400 - Bad Request MUST be returned (see Section 3.1.1 Message Semantics)

8

Section 3.1.1

3/15/24 2:33:35 PM by aeschlimann

CH-ATC

CH-ATC-024

reviewed

Testable

3

The Patient Audit Record Repository MUST match the entity-id parameter with the AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)

8

Section 3.1.2

3/8/24 11:01:57 AM by vhofman

CH-ATC

CH-ATC-025

reviewed

Testable

3

The Patient Audit Record Repository MUST NOT match the entity-id parameter with any other parameter than AuditEvent.entity.identifier (see Section 3.1.2 Additional ATNA Search Parameters)

8

Section 3.1.2

3/8/24 11:02:00 AM by vhofman

CH-ATC

CH-ATC-026

reviewed

Testable

2

1

The entity-id parameter MUST be the patient EPR-SPID (see Section 3.1.2 Additional ATNA Search Parameters)

8

Section 3.1.2