Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

I. POLICY

Relevant policies include:

Please see the Protected Environment FAQ for more information about what resources are available in the CHPC protected environment.

If this is a new project you'll need to work with CHPC and the Information Security and Privacy office (ISPO) (Patient Privacy ) to satisfy security requirements: 

  1. Depending upon the scope of the project, an "Inherent Risk survey" may need to be done by the Information Security Office (ISO). A risk assessment and mitigation plan must be approved by ISPO Information Security Office A satisfactory scan report must be completed. 

  2. If there is any information sharing with third parties, an information sharing assessment form (ISAF) needs to be initiated with the UofU privacy office to determine if a Business Associates Agreement needs to be on file. Please send CHPC your BAA if you have one already, otherwise  The ISAF must be completely filled out (Typed) by the requesting department and returned for evaluation to determine the need for a Business Associate Agreement or other agreement to protect the information being shared. ISAF form can be found at Business Associates

  3.  Please refer to the UofU Information Security and Privacy Office for details and help (and keep CHPC informed)

II. PURPOSE & SCOPE

This document was created by support personnel at University of Utah in the Biomedical Informatics Core to serve as an instructional-use document for study personnel to access, input, and export study-related data; modify study records; and modify study instruments.

III. RESOURCES 

IV. DEFINITIONS 

  • CHPC: Center for High Performance Computing 

  • PE: Protected Environment 

  • Narwhal: Windows Virtual Machine Operating System (narwhal.chpc.utah.edu). 

  • VPN: Virtual Private Network.  

V. PROCEDURE 

Your computer

Info

Virtual Private Network (VPN), Why do I need to connect to the VPN?

VPN connection is required to access OpenSpecimen.

  • Researchers need a safe place to compute and work with restricted data

  • Restricted data can be stolen from insecure places – insecure systems, laptops/phones and tablets/removable drives

  • PHI security breaches are serious. e.g., fines, potential lawsuits, loss of reputation/credibility/funding

  • Required by law in order to comply with regulations such as HIPAA.

Protected Environment Frequently Asked Questions (FAQ)

INITIAL CONSIDERATIONS:

Your device must be connected to either the UofU Network or VPN into the UofU Network to ensure safety when working with protected data.

Use Global Protect GlobalProtect VPN to connect to the UofU Network from off-campus locations.  There There are a few steps for the initial setup, however once initial configuration is complete you will simply click ‘connect’ to access the VPN . Please follow the steps below to complete the initial configuration.

...

...

Download Global Protect VPN to your device: https://apps.apple.com/us/app/globalprotect/id1400555706

Start client and input portal address ‘vpn.utah.edu’ > click ‘save’

If needed, you may access the portal address via Global Protect settings.

...

moving forward.

Expand
titleExamples with images
  • Download GlobalProtect VPN to your device following the above instruction link

  • Ensure you’ve setup your UofU Duo account for two-factor authentication, instructions, here

  • Once GlobalProtect is installed:

    • Access GlobalProtect on your device

    • Click 3-lined action bar

    • Select ‘settings’

    • Click small (+) plus icon at the bottom of the pop-up window to add

...

Image AddedImage AddedImage Modified

...

...

  • Click connect

...

Image Added
  • Login to U of U pop-up page using your unid & campus wide password

...

4. Confirm Duo authentification

...

...

Image Added

  • Confirm Duo authentication

**If you do not have Duo setup, this must be setup to proceed with VPN access. Visit the Duo management portal to register device: 2FA Portal

Image Added

  • GlobalProtect confirms you are ‘Connected’ to the VPN

Image Modified

...