Value Set http://hl7.org/fhir/vs/security-event-sub-type

Security Event Sub-Type

More detailed code concerning the type of the security event - defined by DICOM with some FHIR specific additions

Copyright Statement: These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright 2011 by the National Electrical Manufacturers Association

This value set includes codes defined in other code systems, using the following rules:

• Include these codes as defined in http://nema.org/dicom/dcid

  Code	Display	Definition
  110120	Application Start	Audit event: Application Entity has started
  110121	Application Stop	Audit event: Application Entity has stopped
  110122	Login	Audit event: User login has been attempted
  110123	Logout	Audit event: User logout has been attempted
  110124	Attach	Audit event: Node has been attached
  110125	Detach	Audit event: Node has been detached
  110126	Node Authentication	Audit event: Node Authentication has been attempted
  110127	Emergency Override Started	Audit event: Emergency Override has started
  110128	Network Configuration	Audit event: Network configuration has been changed
  110129	Security Configuration	Audit event: Security configuration has been changed
  110130	Hardware Configuration	Audit event: Hardware configuration has been changed
  110131	Software Configuration	Audit event: Software configuration has been changed
  110132	Use of Restricted Function	Audit event: A use of a restricted function has been attempted
  110133	Audit Recording Stopped	Audit event: Audit recording has been stopped
  110134	Audit Recording Started	Audit event: Audit recording has been started
  110135	Object Security Attributes Changed	Audit event: Security attributes of an object have been changed
  110136	Security Roles Changed	Audit event: Security roles have been changed
  110137	User security Attributes Changed	Audit event: Security attributes of a user have been changed
  110138	Emergency Override Stopped	Audit event: Emergency Override has Stopped
  110139	Remote Service Operation Started	Audit event: Remote Service Operation has Begun
  110140	Remote Service Operation Stopped	Audit event: Remote Service Operation has Stopped
  110141	Local Service Operation Started	Audit event: Local Service Operation has Begun
  110142	Local Service Operation Stopped	Audit event: Local Service Operation Stopped

• Include these codes as defined in http://hl7.org/fhir/restful-operation

  Code	Display	Definition
  110142
  read	read	Read the current state of the resource.
  vread	vread	Read the state of a specific version of the resource.
  update	update	Update an existing resource by its id (or create it if it is new).
  delete	delete	Delete a resource.
  history-instance	history-instance	Retrieve the update history for a resource instance.
  validate	validate	Check that the content would be acceptable as an update.
  history-type	history-type	Get a list of updates to resources of this type.
  create	create	Create a new resource with a server assigned id.
  search	search	Supports search operations using the parameters described in the profile.