DUPRI Sample IT Plans (Version 1.0)
Data use requests and new proposals requiring IRB and/or ORS approval are being routed through Duke’s IT Security Office (ITSO), which must review any data use agreement with a data supplier to ensure that the department or unit receiving the data has sufficient resources to put into place data protection procedures stipulated in the agreements.
ITSO’s charge to review agreements is part of the Duke initiative focusing on data security. These standards address server, workstation, mobile device, and laptop security and other network standards for individual researchers and departments. View the Research Review Document (PDF).
Facilities for Sensitive & Restricted Data Storage and Use within the Social Sciences at Duke are listed here: data-and-it-services. Because most DUPRI researchers use Sociology, Economics, Public Policy, or SSRI servers and other resources, we have assembled below several default data security plans which have been approved by ITSO and ORS in the past few months. We intend to supplement and update this list, so that DUPRI-affiliated researchers can use these plans as base documents when preparing their own data management proposals. Plans for Sociology and SSRO are listed here. We hope to have language for Econ and the Linux computational server at Trinity Technology Services. Researchers affiliated with the Sanford School of Public Policy should continue to contact Anne Fletcher if they need to use the Resource Room there.
Caveats: ITSO has been doing a soft rollout of the standards and has approved the above plans with the expectation that the departments and institutes will more fully flesh out their plans as familiarity with the standards. We will continue to work with ORS and ITSO to keep these documents up-to-date. The goal is to have nearly pre-approved plans available at DUPRI, which will find an easy path through the approval process. Please contact the relevant IT staff or data manager before submitting a proposal committing to utilize a school’s, department’s, or institute’s resources. The listing of sample plans here does not imply that the unit has agreed to accommodate new or expanded projects. You will need to get their approval before submitting a proposal.
The Social Science Research Institute (SSRI), in partnership with OIT and ITSO, administers a Protected Research Data Network (PRDN) dedicated to Social Science projects using sensitive data. The PRDN is a dual purpose file storage and computational resource. A complete description can be found here.