Test
every $actpart in (/AuditMessage/ActiveParticipant[@UserIsRequestor]) satisfies count($actpart/RoleIDCode)>0W - 1
Description
Reporting Person and/or Process /RoleIDCode has optionality 'C' ( PS3.15 , A.5.3.11 )
Test
every $partid in /AuditMessage/ParticipantObjectIdentification[ @ParticipantObjectTypeCode='2'] satisfies $partid/SOPClassW - 2
Description
Alert Subject/SOPClass has optionality 'C' ( PS3.15 , A.5.3.11 )
Test
/AuditMessage/EventIdentification/EventIDR - 1
Description
Event/EventID is mandatory ( PS3.15 , A.5.3.11 )
Test
not (/AuditMessage/EventIdentification/EventID) or /AuditMessage/EventIdentification/EventID/@csd-code='110113'R - 2
Description
/AuditMessage/EventIdentification/EventID@csd-code must be '110113' if Event/EventID present ( PS3.15 , A.5.3.11 )
Test
not (/AuditMessage/EventIdentification/EventID) or /AuditMessage/EventIdentification/EventID/@codeSystemName='DCM'R - 3
Description
/AuditMessage/EventIdentification/EventID@codeSystemName must be 'DCM' if Event/EventID present ( PS3.15 , A.5.3.11 )
Test
not (/AuditMessage/EventIdentification/EventID) or /AuditMessage/EventIdentification/EventID/@originalText='Security Alert'R - 4
Description
/AuditMessage/EventIdentification/EventID@originalText should be 'Security Alert' if Event/EventID present ( PS3.15 , A.5.3.11 )
Test
/AuditMessage/EventIdentification/@EventActionCodeR - 5
Description
Event/@EventActionCode is mandatory ( PS3.15 , A.5.3.11 )
Test
not (/AuditMessage/EventIdentification/@EventActionCode) or /AuditMessage/EventIdentification/@EventActionCode='E'R - 6
Description
/AuditMessage/EventIdentification/@EventActionCode must be 'E' if Event/EventActionCode present ( PS3.15 , A.5.3.11 )
Test
/AuditMessage/EventIdentification/@EventDateTimeR - 7
Description
Event/@EventDateTime is mandatory ( PS3.15 , A.5.3.11 )
Test
/AuditMessage/EventIdentification/@EventOutcomeIndicatorR - 8
Description
Event/@EventOutcomeIndicator is mandatory ( PS3.15 , A.5.3.11 )
Test
/AuditMessage/EventIdentification/EventTypeCodeR - 9
Description
Event/EventTypeCode is mandatory ( PS3.15 , A.5.3.11 )
Test
every $actpart in /AuditMessage/ActiveParticipant[@UserIsRequestor] satisfies $actpart/@UserIDR - 10
Description
Reporting Person and/or Process /UserID is mandatory ( PS3.15 , A.5.3.11 )
Test
every $actpart in /AuditMessage/ActiveParticipant[@UserIsRequestor] satisfies $actpart/@UserIsRequestorR - 11
Description
Reporting Person and/or Process /@UserIsRequestor is mandatory ( PS3.15 , A.5.3.11 )
Test
every $actpart in /AuditMessage/ActiveParticipant[@UserIsRequestor] satisfies count($actpart/MediaIdentifier)=0R - 12
Description
Reporting Person and/or Process /MediaIdentifier is prohibited ( PS3.15 , A.5.3.11 )
Test
every $actpart in (/AuditMessage/ActiveParticipant[@UserIsRequestor='false']) satisfies count($actpart/RoleIDCode)>0R - 13
Description
Performing Persons or Processes /RoleIDCode has optionality 'C' ( PS3.15 , A.5.3.11 )
Test
every $actpart in /AuditMessage/ActiveParticipant[@UserIsRequestor='false'] satisfies $actpart/@UserIDR - 14
Description
Performing Persons or Processes /UserID is mandatory ( PS3.15 , A.5.3.11 )
Test
every $actpart in /AuditMessage/ActiveParticipant[@UserIsRequestor='false'] satisfies $actpart/@UserIsRequestorR - 15
Description
Performing Persons or Processes /@UserIsRequestor is mandatory ( PS3.15 , A.5.3.11 )
Test
every $actpart in /AuditMessage/ActiveParticipant[@UserIsRequestor='false'] satisfies not($actpart/@UserIsRequestor) or $actpart/@UserIsRequestor='false'R - 16
Description
Performing Persons or Processes /@UserIsRequestor must be 'false' if Performing Persons or Processes /@UserIsRequestor present ( PS3.15 , A.5.3.11 )
Test
every $actpart in /AuditMessage/ActiveParticipant[@UserIsRequestor='false'] satisfies count($actpart/MediaIdentifier)=0R - 17
Description
Performing Persons or Processes /MediaIdentifier is prohibited ( PS3.15 , A.5.3.11 )
Test
every $partid in /AuditMessage/ParticipantObjectIdentification[ @ParticipantObjectTypeCode='2'] satisfies $partid/@ParticipantObjectIDR - 18
Description
Alert Subject/ParticipantObjectID is mandatory ( PS3.15 , A.5.3.11 )
Test
every $partid in /AuditMessage/ParticipantObjectIdentification[ @ParticipantObjectTypeCode='2'] satisfies $partid/ParticipantObjectIDTypeCodeR - 19
Description
Alert Subject/ParticipantObjectIDTypeCode is mandatory ( PS3.15 , A.5.3.11 )
Test
every $partid in /AuditMessage/ParticipantObjectIdentification[ @ParticipantObjectTypeCode='2'] satisfies $partid/@ParticipantObjectTypeCodeR - 20
Description
Alert Subject/ParticipantObjectTypeCode is mandatory ( PS3.15 , A.5.3.11 )
Test
every $partid in /AuditMessage/ParticipantObjectIdentification[ @ParticipantObjectTypeCode='2'] satisfies not($partid/@ParticipantObjectTypeCode) or $partid/@ParticipantObjectTypeCode='2'R - 21
Description
Alert Subject/@ParticipantObjectTypeCode must be '2' if /Alert Subject/@ParticipantObjectTypeCode present ( PS3.15 , A.5.3.11 )
Test
every $partid in /AuditMessage/ParticipantObjectIdentification[ @ParticipantObjectTypeCode='2'] satisfies not($partid/@ParticipantObjectTypeCodeRole) or matches($partid/@ParticipantObjectTypeCodeRole,'5|13')R - 22
Description
Alert Subject/@ParticipantObjectTypeCodeRole must have this form '5|13' if Alert Subject/@ParticipantObjectTypeCodeRole present ( PS3.15 , A.5.3.11 )
Test
count(/AuditMessage/ActiveParticipant[@UserIsRequestor])>0R - 23
Description
The number of Reporting Person and/or Process SHALL be greater than or equal to 1 ( PS3.15 , A.5.3.11 )
Test
count(/AuditMessage/AuditSourceIdentification)<2R - 24
Description
The number of AuditSource SHALL be less than or equal to 1 ( PS3.15 , A.5.3.11 )
Test
count(/AuditMessage/AuditSourceIdentification)>0R - 25
Description
The number of AuditSource SHALL be greater than or equal to 1 ( PS3.15 , A.5.3.11 )
Test
/AuditMessage/EventIdentificationR - 26
Description
The cardinality of Event is 1..1 ( PS3.15 , A.5.3.11 )
Test
every $act in /AuditMessage/ActiveParticipant satisfies $act[@UserIsRequestor] or $act[@UserIsRequestor='false']R - 27
Description
Allowed ActiveParticipants are Reporting Person and/or Process , Performing Persons or Processes ( PS3.15 , A.5.3.11 )
Test
every $partid in /AuditMessage/ParticipantObjectIdentification satisfies $partid[ @ParticipantObjectTypeCode='2']R - 28
Description
Allowed ParticipantObjectIdentifications are Alert Subject ( PS3.15 , A.5.3.11 )