February 09, 2016

Back to Security Work Group Main Page

Attendees

x	Member Name		x	Member Name		x	Member Name
x	Kathleen ConnorSecurity Co-chair		x	Duane DeCouteau		.	Chris Clark
x	John MoehrkeSecurity Co-chair		.	Johnathan Coleman		.	Aaron Seib
.	Alexander Mense Security Co-chair		.	Ken Salyards		.	Christopher D Brown TX
.	Trish WilliamsSecurity Co-chair		.	Gary Dickinson		x	Dave Silver
x	Mike Davis		.	Ioana Singureanu			Mohammed Jafari
x	Suzanne Gonzales-Webb		x	Rob Horn		.	Galen Mulrooney
x	Diana Proud-Madruga		.	Ken Rubin		.	William Kinsley
x	Rick Grow		.	Paul Knapp		.	Debbie Bucci
x	Glen Marshall, SRS		.	Bill Kleinebecker		x	Christopher Shawn
.	Oliver Lawless		.	[		.	Serafina Versaggi
.	Beth Pumo		.	Russell McDonell		.	Paul Petronelli , Mobile Health
.	Christopher Doss		x	Kamalini Vaidya		.	[mailto: Stephanie Dyke ]

Back to Security Main Page

Agenda DRAFT

1. ( 5 min) Roll Call, Agenda Approval
2. ( 5 min) Approve February 2, 2016 Security WG Conference Call Minutes
3. ( 30 min) March 2016 Security WG Initial Harmonization Proposals
   • Changes to SecurityCategoryObservationValue consent directive codes
   • Add ActUSPrivacyLaw to v:SecurityCategoryObservationValue
   • New Obligation Codes
   • Augment ProvenanceEvent Vocabulary
4. ( 5 min) Privacy and Security by Design PSS discussion
5. ( 5 min) Joint Vocabulary Alignment Update - Diana
6. ( 5 min) FHIR Security report out - John / not covered
7. ( 5 min) PASS Audit Conceptual Model – Diana

Note that there will be a FHIR Security call at 2pm PT/5pm ET See agenda at FHIR Security Agenda

Minutes

• Approval of Agenda unanimous
• Approval of February 2, 2016 Security WG Conference Call Minutes unanimous
• Review Changes to SecurityCategoryObservationValue consent directive codes
  • discussion didn't come to an agreement.
  • Concern about Germany use case
  • defer approval until people can review
• Review Add ActUSPrivacyLaw to v:SecurityCategoryObservationValue
  • bring forward codes that are specific in the USA
• Review New Obligation Codes
  • discussion that it is not clear how these obligations are intended to be used. The use case of sending these kinds of instructions is not clear. The definitions of the obligations given are not consistent with the discussion.
  • Kathleen will provide an updated copy for review
• Review Augment ProvenanceEvent Vocabulary
  • discussion of provenance event codes
  • Need offline review
• Need offline review of these for approval next week
• John can't make the FHIR Security call -- will cancel
• EHR Joint Vocabulary Alignment meeting was canceled
  • Mike did submit new diagrams
• PASS Access Control Conceptual Model
  • Response received from Bernd. Need to discuss Bernd's clarification and propose/vote on a resolution at the next Security meeting.