International Business Machines Corporation
Continuous compliance auditing readiness and attestation in healthcare cloud solutions

Abstract:

A mechanism is provided in a data processing system comprising at least one processor and at least one memory, the at least one memory comprising instructions which are executed by the at least one processor and configure the processor to implement a healthcare blockchain framework for continuous compliance auditing readiness and attestation in healthcare cloud solutions. The mechanisms provides a healthcare blockchain framework to create, read, update, and delete elements of a healthcare compliance model supporting a dynamic allocation of cloud resources to a healthcare business network. Compliance with one or more healthcare regulations is built into the blockchain framework. Responsive to an attestation event, a compliance attestation component within the healthcare blockchain framework reviews asset contents, state, and properties of an asset in a compliance repository. The compliance attestation component creates a bottom-up asset manifest for the asset and compares the asset manifest to a test case corresponding to an asset class of the asset. The compliance attestation component validates the asset against evidence rules corresponding to the asset class of the asset based on the comparison. Responsive to the compliance attestation component validating the asset, the mechanism generates a proof-of-validation certification.