4.8.4 What events are currently audited? * All data access must be audited Off Only selected / protected data Off must be audited Maintenance on user roles must Off be audited (new users, disabled user, updated roles or permissions) Purge and archive events Off Domain-dependent events (e.g., Off adding a new sensor) REST or SOAP events Off Changes in system Off configuration Organizational changes Off External project ownership / Off management changes Requirements are externally set, Off e.g., by PCI compliance Domain-specific events (patient Off death in a drug trial) Other: Yes Other text None 4.9 Application Provider Security 4.9.1 Describe Application Provider Security * There is a security mechanism Off implemented at the application level The app provider level is aware Off of PII or privacy data elements The app provider implements Off audit and logging The app provider security relies Off on framework-level security for its operation Does not apply to our Yes application Other: Off Other text 4.10 Framework Provider Security
4.8.4 What events are currently audited? * All data access must be audited Off Only selected / protected data must be audited Off Maintenance on user roles must be audited (new users, disabled user, updated roles or permissions) Off Purge and archive events Off Domain-dependent events (e.g., adding a new sensor) Off REST or SOAP events Off Changes in system configuration Off Organizational changes Off External project ownership / management changes Off Requirements are externally set, e.g., by PCI compliance Off Domain-specific events (patient death in a drug trial) Off Other: Yes Other text None 4.9 Application Provider Security 4.9.1 Describe Application Provider Security * There is a security mechanism implemented at the application level Off The app provider level is aware of PII or privacy data elements Off The app provider implements audit and logging Off The app provider security relies on framework-level security for its operation Off Does not apply to our application Yes Other: Off Other text 4.10 Framework Provider Security