February 09, 2016

Back to Security Work Group Main Page

Attendees

x	Member Name		x	Member Name		x	Member Name
x	Kathleen ConnorSecurity Co-chair		x	Duane DeCouteau		.	Chris Clark
x	John MoehrkeSecurity Co-chair		.	Johnathan Coleman		.	Aaron Seib
.	Alexander Mense Security Co-chair		.	Ken Salyards		.	Christopher D Brown TX
.	Trish WilliamsSecurity Co-chair		.	Gary Dickinson		x	Dave Silver
x	Mike Davis		.	Ioana Singureanu			Mohammed Jafari
x	Suzanne Gonzales-Webb		x	Rob Horn		.	Galen Mulrooney
x	Diana Proud-Madruga		.	Ken Rubin		.	William Kinsley
x	Rick Grow		.	Paul Knapp		.	Debbie Bucci
x	Glen Marshall, SRS		.	Bill Kleinebecker		x	Christopher Shawn
.	Oliver Lawless		.	[		.	Serafina Versaggi
.	Beth Pumo		.	Russell McDonell		.	Paul Petronelli , Mobile Health
.	Christopher Doss		x	Kamalini Vaidya		.	[mailto: Stephanie Dyke ]

Back to Security Main Page

Agenda DRAFT

1. ( 5 min) Roll Call, Agenda Approval
2. ( 5 min) Approve February 2, 2016 Security WG Conference Call Minutes
3. ( 30 min) March 2016 Security WG Initial Harmonization Proposals

• Changes to SecurityCategoryObservationValue consent directive codes
• Add ActUSPrivacyLaw to v:SecurityCategoryObservationValue
• New Obligation Codes
• Augment ProvenanceEvent Vocabulary

1. ( 5 min) Privacy and Security by Design PSS discussion
2. ( 5 min) Joint Vocabulary Alignment Update - Diana
3. ( 5 min) FHIR Security report out - John / not covered
4. ( 5 min) PASS Audit Conceptual Model – Diana

Note that there will be a FHIR Security call at 2pm PT/5pm ET See agenda at FHIR Security Agenda

Minutes

• Approval of Agenda unanimous
• Approval of February 2, 2016 Security WG Conference Call Minutes unanimous
• Review Changes to SecurityCategoryObservationValue consent directive codes
  • discussion didn't come to an agreement.
  • Concern about Germany use-case
  • defer approval until people can review
• Review Add ActUSPrivacyLaw to v:SecurityCategoryObservationValue
  • bring forward codes that are specific in the USA
• Review New Obligation Codes
  • discussion that it is not clear how these obligations are intended to be used. The use-case of sending these kinds of instructions is not clear. The definitions of the obligations given are not consistent with the discussion.
  • Kathleen will provide an updated copy for review
• Review Augment ProvenanceEvent Vocabulary
  • discussion of provenance event codes
  • Need offline review
• Need offline review of these for approval next week
• John can't make the FHIR Security -- will cancel
• EHR Security meeting was canceled
  • Mike did submit new diagrams
• Vocabulary
  • Working with Bernd