java - Does HIPAA require to log ALL queries to the database (including calls from JDBC)? -
we use postgres. after setting log_statement=all, it'll log queries psql, not application accessing via jdbc.
i find bit counter-intuitive. isn't ~95% of data access in application done via jdbc (or similar in other languages)?
in articles hipaa implementation, it's recommemded set log_statement=all. purpose serve if majority of data access wouldn't logged @ all?
what queries should log (or should log them @ all?) should use log4jdbc? or log_statement=all enough?
Comments
Post a Comment