SECURITY • PRIVACY • ACCOUNTABILITY

Security Monitoring

Document ID: SEC-DOC-007
Version: 1.0
Status: Draft
Last Updated: 07/27/2026

Privacy and public-documentation notice

Security and HIPAA screens may contain workforce identity, Provider information, IP addresses, access history, support-session data, and protected health information. Screenshots in this guide use masked, redacted, or demonstration content. Unmasked content should be treated as authorized demo data only.

Purpose

Security Monitoring provides searchable evidence of system activity and PHI access. The design supports operational review, privacy oversight, incident investigation, and accountability across Provider-scoped records.

HIPAA Audit Logs with event totals, filters, severity, status, export, and detailed results.

PHI Access Monitoring with purpose of use, access decision, minimum necessary status, IP address, device, and Provider scope.

Audit Log Functions

Area	Function
Summary metrics	Shows total events, today's events, PHI access volume, and critical events.
Search	Finds activity by action, module, event type, description, entity, or user-related values.
Module and Action filters	Isolates activity for a specific business or clinical workflow.
Severity and Status	Separates informational, warning, critical, success, or failure-related events where available.
Date range	Supports audits and incident review over a defined period.
Export	Creates an authorized CSV evidence set according to Provider policy.
View	Opens detailed event identity, request, device, route, old values, new values, and metadata.