Le scénario
A healthcare provider needs controlled access to patient records with continuous file monitoring, anomaly detection, automatic protection, and audit trails for HIPAA compliance.
Ce que contient ce dessin
Comprenez les décisions qui le sous-tendent.
01
Use «include» to make file monitoring and protection mandatory with every patient record access.
02
Use «extend» for optional compliance alerts only when anomaly detection crosses a threshold.
03
Separate auditor and security administrator goals so audit reporting and protection rule management remain distinct.
Reuse this structure for regulated environments where file access must be monitored, protected, and auditable, such as HIPAA, GDPR, or SOX systems.