If you currently store data in the Department of Epidemiology & Biostatistics (DEB) Data Systems/Data Center or are an active user of the DEB Data Systems Services (DSS) you should be aware that UCSF is taking steps to increase IT security in order to ensure compliance with University of California policy BFB-IS-3: Electronic Information Security (“IS-3”). This policy applies to all campuses, all faculty, staff, students, and contractors who use UC information technology resources, including DSS resources.

As the policy states, IT security is a shared responsibility, we, therefore, ask you to be aware of the following:

Your responsibilities as an active user of the Department of Epidemiology and Biostatistics Data System Services

• All Data Use agreements must be signed by the appropriate UCSF official with a copy provided to the DSS via email to ServiceDesk@ucsf.edu.  
• Users must utilize ServiceDesk email for inquires, reporting of issues and requests for system enhancements (ServiceDesk@ucsf.edu).
• Submit requests for software and packages to be installed via ServiceDesk@ucsf.edu.
• Users are prohibited from changing configurations, installing programs or abusing any of the existing applications to elevate access.
• Abide by the terms mentioned in the Confidentiality Statement.
• We recommend that you maintain your data within our secure environment. Researchers who choose to save data in other locations are personally responsible for the security of the information at all times and are required to comply with all applicable state and federal laws.
• Users are responsible for notifying DEB-DSS 30 days prior to discontinuing DSS support and arrange disposition of data housed within DSS. We will delete data within 90 days of departure.
• User end points (laptops/desktops) connecting to DEB must meet UCSF minimum security standards.
• Users are responsible for adhering to Data Use agreements for data they store in our environment.

PI or study owner responsibilities

• The PI or study owner must notify DEB-DSS of any study participants whose access needs to be removed or is no longer required.
• The PI, study owner or study manager must notify DEB-DSS of any users who have transferred departments and no longer require access to study data.
• The PI or study owner must notify DEB-DSS when departing UCSF and transfer to another UCSF owner or arrange disposition of data housed within DSS.
• The PI or study owner is responsible for responding promptly to requests to review, classify, and inventory data of their research project study data via the Bonita Soft process.
• Communicate any change in security requirements in research agreements to DEB-DSS via ServiceDesk@ucsf.edu.
• Request restoration from backups of DEB study data within 24 hours of incident when required.
• The PI or study owner is responsible for ensuring that any user added to a DEB study that requires IRB approval, is listed on the IRB.

 

 

Interested in DSS solutions?

Email the DSS team or complete this online form.

Current customer in need of assistance?

Complete this online form.