Common use of Audit Capabilities Clause in Contracts

Audit Capabilities. Auditing and logging capabilities will permit HCA to identify, and possibly reverse, unauthorized or unintended changes to application.  Application must support the identification of the nature of each access and/or modification through the use of logging.  Application must employ audit capabilities to sufficiently track details that can establish accountability for each step or task taken during operational process.  All audit logs must be protected from human alteration.  Access to logs must be limited to authorized users.  The application must employ basic query tools and reports to easily search logs.  Logging and auditing functionality must include the following:  Record of who did what to which object, when and on which system.  Successful/unsuccessful log-in and log-out of users.  Changes to user accounts or privileges (creation, modification, deletion).