Educause Security Discussion mailing list archives
Re: [External] [SECURITY] cybersecurity representation on the IRB
From: "Bernard, Chris" <chris.bernard () UCONN EDU>
Date: Thu, 25 Mar 2021 18:34:01 +0000
For UConn, I sit on the IRB as an Ex Officio member and am available to weigh in as necessary. Chris Bernard, Ed.D., CISSP, CCSP, GLEG, HCISPP Chief Information Security Officer University of Connecticut Phone: (860) 486-3743 From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Knauss, Beth Sent: Thursday, March 25, 2021 2:16 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] [External] [SECURITY] cybersecurity representation on the IRB *Message sent from a system outside of UConn.* At Tufts, we don't have a cybersecurity/data privacy person on our IRBs. The IRBs often consult with us to support their Common Rule requirement to consider privacy for research subjects and data confidentiality. We get frequent requests for reviews especially when a researcher wants to use or develop a new app/tool or will be collecting data that is subject to the EEA and UK GDPRs or other privacy laws. We write up the results of our review and submit it as an ancillary review in our eIRB system. Beth Knauss Information Security Compliance Program Manager Tufts Technology Services Tufts University (she/her/hers) From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of Welch, Von <vwelch () IU EDU<mailto:vwelch () IU EDU>> Date: Thursday, March 25, 2021 at 1:47 PM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Subject: Re: [SECURITY] [External] [SECURITY] cybersecurity representation on the IRB Our IRB loops us in for an opinion when they feel it is warranted. Von From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of Blake Penn <bpenn () COLGATE EDU<mailto:bpenn () COLGATE EDU>> Date: Thursday, March 25, 2021 at 1:38 PM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Subject: [External] [SECURITY] cybersecurity representation on the IRB This message was sent from a non-IU address. Please exercise caution when clicking links or opening attachments from external sources. ------- Curious how many out there have cybersecurity representation on their IRB. We had ex-officio non-voting representation at my former institution but none here at my new uni. Was curious how common/uncommon this is. Best regards, Blake -- Blake Penn Chief Information Security Officer Information Technology Services 315-228-7151 www.colgate.edu<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.colgate.edu%2F&data=04%7C01%7Cchris.bernard%40UCONN.EDU%7Cacea712d5d9d4600bd2308d8efbb7adb%7C17f1a87e2a254eaab9df9d439034b080%7C0%7C0%7C637522935797139072%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=RRMrOiJAQ7KdMTkXVEJRia9mgmz9nMiQp8ihYAhvKXE%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cchris.bernard%40UCONN.EDU%7Cacea712d5d9d4600bd2308d8efbb7adb%7C17f1a87e2a254eaab9df9d439034b080%7C0%7C0%7C637522935797149065%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=eXHFW0GepdXg%2BsHxZZ3qRVERjJv5LIdLTqL48k8nQlE%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cchris.bernard%40UCONN.EDU%7Cacea712d5d9d4600bd2308d8efbb7adb%7C17f1a87e2a254eaab9df9d439034b080%7C0%7C0%7C637522935797149065%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=eXHFW0GepdXg%2BsHxZZ3qRVERjJv5LIdLTqL48k8nQlE%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cchris.bernard%40UCONN.EDU%7Cacea712d5d9d4600bd2308d8efbb7adb%7C17f1a87e2a254eaab9df9d439034b080%7C0%7C0%7C637522935797159069%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=mh1zAbYNVKEbSX1Nm5QbL9DqSQ0Kn3Lgqt%2Be3sqoqcs%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Blog Post on - 800-171 Compliance on the Horizon Brian Kelly (Mar 25)
- Re: Blog Post on - 800-171 Compliance on the Horizon Fred Eaker (Mar 25)
- Re: [External] Re: [SECURITY] Blog Post on - 800-171 Compliance on the Horizon Thomas Dugas (Mar 25)
- cybersecurity representation on the IRB Blake Penn (Mar 25)
- Re: cybersecurity representation on the IRB Laura Raderman (Mar 25)
- Re: [External] [SECURITY] cybersecurity representation on the IRB Welch, Von (Mar 25)
- Re: [External] [SECURITY] cybersecurity representation on the IRB Jerry Tylutki (Mar 25)
- Re: [External] [SECURITY] cybersecurity representation on the IRB Knauss, Beth (Mar 25)
- Re: [External] [SECURITY] cybersecurity representation on the IRB Bernard, Chris (Mar 25)
- Re: [External] Re: [SECURITY] Blog Post on - 800-171 Compliance on the Horizon Thomas Dugas (Mar 25)
- Re: cybersecurity representation on the IRB Ken Connelly (Mar 25)
- Re: cybersecurity representation on the IRB Pelegrin, Jeremy J (Mar 25)
- Re: Blog Post on - 800-171 Compliance on the Horizon Fred Eaker (Mar 25)
- Re: cybersecurity representation on the IRB Kris Sulzberger (Mar 25)
- Re: cybersecurity representation on the IRB Dennis Bolton (Mar 25)
- Re: cybersecurity representation on the IRB Jay Gallman (Mar 25)
- <Possible follow-ups>
- Re: Blog Post on - 800-171 Compliance on the Horizon Perez, Roberto (Mar 25)
- Re: Blog Post on - 800-171 Compliance on the Horizon Jeffrey Miller (Mar 25)
- Re: Blog Post on - 800-171 Compliance on the Horizon James Farr (Mar 25)
- Re: Blog Post on - 800-171 Compliance on the Horizon Ambrosi, Thomas (Mar 25)
- Re: Blog Post on - 800-171 Compliance on the Horizon Karen A Bell (kbell) (Mar 25)
- Re: Blog Post on - 800-171 Compliance on the Horizon Jeffrey Miller (Mar 25)