HIPAA Section D – Audit Controls § 164.312(b)
(Required)
Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.
Access and Management: Pro, Central
- Connection and remote session activity is logged on the host computer to ensure security and maintain quality control.
Tip: To view information on session activity, open the and follow this path: .
- Access the Windows Event log or Mac console log to get up-to-the-minute data, including user names and the client computer’s IP address, on logon/logout and remote control events.
- On the host computer’s hard disk, a detailed log is kept of the remote access product’s activities. To protect these files from tampering, the administrator can also specify a different log file location.
Tip: Open the and follow this path: .
- Configure and log on to a Syslog server, which allows you to view events from multiple locations. Requires Central; Windows hosts only.
- GoTo recommends using a relational database to centrally collect log information. Log destinations can be as simple as a Microsoft Access database or as sophisticated as an Oracle server.
- Administrators can also restrict access to host computers to ensure that data can only be queried or modified by qualified administrators.
- Automatically create .avi file video recordings of every remote control session. These recordings enable the user to see the recorded sessions exactly as seen by the remote user. Recordings can be saved to a network location. Windows hosts only.
Note: Open the and follow this path: .
- LogMeIn Files
- LogMeIn Files store additional audit information when files or folders are made available via a public link. Otherwise, you can rely on account access logs.
- You can set up an object audit for your registry to create an audit trail of clients linking LogMeIn Files to their computers.
- GoTo recommends using a relational database to centrally collect log information. Log destinations can be as simple as a Microsoft Access database or as sophisticated as an Oracle server.
Support and Collaboration: Rescue
- Automatically create .avi file video recordings of every remote control session. These recordings enable the user to see the recorded sessions exactly as seen by the remote user. Recordings can be saved to a network location.
Tip: Open the Administration Center, select a group, and follow this path: .
- Remote sessions are logged to ensure security and maintain quality control.
Tip: Open the Administration Center and follow this path: .
Parent article:
HIPAA Considerations - Introduction
Previous article:
HIPAA Section C – Access Control § 164.312(a)(1)