Auditing in IMPAX: Concepts

All actions in IMPAX that access protected health information generate audit records containing the relevant details about the event. Audit record information includes:

• The IP address or hostname of the machine used to access the data

• The date and time of access

• The user ID or process ID used to access the data

• The event class and event type

• Patient identifier

• Study identifier

Where audit records are stored

Audit records are stored in the IMPAX database in two tables:

• The MAP_EVENT table stores the most recent audit records.

• The MAP_EVENT_AUDIT table stores slightly older records.

By default, audit events are stored in the MAP_EVENT table for one day and the MAP_EVENT_AUDIT table for 60 days. MVF Task Scheduler is responsible for moving records from the MAP_EVENT table to the MAP_EVENT_AUDIT table and for removing records from the MAP_EVENT_AUDIT table.