research data security

[Steve Brukbacher <sab2 () UWM EDU>]

Hi,
I'm trying to get my arms around our research data security situation at
our institution.  I'm fairly convinced we need a separate "protocol" for
 research data security, just like we all have an IRB requirement,
requirements for animal care, etc.

I know some will reply that this should "happen" in the IRB process, but
unfortunately, a lot of data security detail is beyond the scope of what
an IRB is tasked with doing.

So my question is, does anyone feel like they have a success story to
share in ensuring that researchers using data with high confidentiality
requirements meet some sort of security standards?


--
Steve Brukbacher, CISSP
University of Wisconsin Milwaukee
Information Security Architect
UWM Computer Security Web Site
www.security.uwm.edu
Phone: 414.229.2224