Healthcare Information Technology Exam Guide for CompTIA Healthcare IT Technician and HIT Pro Certifications

Balanced Access Control and Audit Control

A mixture of both access and audit control best achieves the balance of effectiveness versus safety versus security versus privacy. Using both access and audit controls follows the general concept of “failing into a safe state” in the healthcare treatment domain. What is safe in the banking industry is to forbid access; what is safe in the healthcare treatment domain is more of a balance. It’s important to understand that it is a decision based on a good balance, not simply a declaration that access controls are hard or get in the way. This is not an easy balance, and HIT systems need to be flexible and dynamic; in other words, they need to be flexible to support expanding legitimate needs, and they need ...