A SQUARE PEG IN A ROUND HOLERe-designing high performance computing infrastructure to meet privacy and ethical requirements associated with sensitive research data
K AI T L Y N G U T T E R I D G ER E S E AR C H D AT A P R I V AC Y AN D S E C U R I T Y O F F I C E RU N I V E R S I T Y O F B R I T I S H C O L U M B I A
Image: Datanami (http://goo.gl/Mi3orK)
Image: NPR (http://goo.gl/kfyF4A)
4
OVERVIEW
1. Scope
2. Context / current situation
3. Dilemma: can’t force a square peg into a round hole
4. Current activities and areas of interest moving forward
5. Lessons learnt
5
SCOPE
• Research data that has been collected on individuals, which has received REB
approval
• New and future users of Compute Canada infrastructure
• Province of BC and within UBC’s governance structure
• Takes into consideration what is / will be in place with Compute Canada Security
Program
• Ethics and privacy lens
6
CONTEXT – ROUND HOLE
7
CONTEXT – SQUARE PEG
• What does this mean for data governed under legislation and ethical requirements?
• Data governance
• Data sovereignty
• Research data lifecycle
• Access, use, storage, retention, destruction
• Ethical validity
8
CURRENT ACTIVITIES – NATIONALLY
• Compute Canada Security Program• Security framework, aligned on ISO 27001/27002 • Aims to identify and mitigate gaps caused by CC activities• Leverage local controls and define requirement for additional controls
• Key goals:• Better alignment between CC’s services and CC’s strategic vision;• More efficient implementation of controls for information security;• Minimization of overall risk;• Enhancement of trust by external partners;• Better coordination and response to threats and incident.
9
CURRENT ACTIVITIES – NATIONALLY
• Consultation process between Compute Canada and partner institutions
• Partnerships with organizations and Compute Canada nodes such as: • BC Genome Sciences Centre• HPC4Health• Population Data BC
• Health Data Privacy and Governance Best Practices
• Alignment with other national initiatives including Research Data Canada’s work
10
CURRENT ACTIVITIES – LOCALLY
• UBC Advanced Research Computing (ARC) team • Free institutional service supporting the high-performance computing and data
management needs of UBC researchers.
• Pre-grant consultation on infrastructure and privacy, security, data management needs (CFI and non-CFI)
• Data Management Plans – Research Ethics Board integration
• Compliance mapping – UBC and Health Authority requirements on CC infrastructure
11
LESSONS LEARNT SO FAR
TRUST STACKidea platform other person
12
LESSONS LEARNT SO FAR
CONTEXTlegislative institutional discipline
13
LESSONS LEARNT SO FAR
14
THANK YOU AND QUESTIONS
Kaitlyn GutteridgeResearch Data Privacy and Security Officer, [email protected]
Top Related