GOVERNANCE COMPONENT: DECISION-MAKING PROCESSES |
I A, II A, IV A |
|
|
|
IV D |
|
|
|
GOVERNANCE COMPONENT: PROJECT GOVERNANCE |
II B–D |
|
|
|
II B, IV C |
|
|
|
I A, IV A–C |
|
|
|
I C, II C, III B, IV A and B |
|
|
|
GOVERNANCE COMPONENT: DATA GOVERNANCE (is
part
of
governance
structure
but
not
the
only
part) |
II B–D, III A |
|
|
|
I B, IV B |
|
Standardizes SAS code development, distribution, and testing, and specifies how participating sites execute, review and return results
|
Through standardizing the process of writing, testing, and executing distributed code, cohort teams could plan for this process; in addition review procedures enhanced safeguards to protect PHI
|
I A–B, II B–D |
Other data governance tools and processes
○ Standards for Data Exchange and Quality Assurance
○ Data Sharing Matrix
○ PopMedNet Security Specifications
○ Data Incident Response Plan
|
Created shared expectations for lead and participating sites regarding data sharing, data quality, and response times
Specifies what data can be shared with whom, when, and under what circumstances
Outlines security measures at the FISMA-compliant hosting site for PopMedNet
Outlined a process for notification “cascade” should a data incident (data released or shared outside of the scope of data agreements) occur
|
|
GOVERNANCE COMPONENT: ENGAGING STAKEHOLDERS (NONRESEARCHERS) IN GOVERNANCE |
III C, IV E |
|
|
|