Which item is not typically part of an EpicCare Everywhere audit log entry?

• A. Timestamp
• B. User/role
• C. Action
• D. Patient medical record content

Answer: (D)

Audit logs capture what happened, who did it, and when, rather than the actual data that was accessed. The essential elements are the timestamp showing when the event occurred, the user or role responsible for the action, and the type of action taken (for example, view, edit, or delete). These pieces provide an auditable trail for security and compliance. Recording the full patient medical record content would expose PHI in the log and create unnecessary risk and data volume, so logs typically reference the patient (via an identifier) rather than including the actual content. Therefore, patient medical record content is not typically part of an EpicCare Everywhere audit log entry.