Participants in Setting Rules
Security officer manages security policy,
not a computer specialist or database administrator.
Computer specialist provides tools
agent workstation program for security mediation
Healthcare institution defines policies
its security officer uses the program as the tool
Tool provides logging for
- system improvements
- audit trail
- accountability
Formalizes ad-hoc practices