The following systems are currently undergoing the Security Assessment & Authorization process developed by the BSD Information Security Office. Upon accreditation and completion of the review process, systems will remain on this dashboard as part of a continuous support model provided by the SAA. Additional information regarding the SAA process can be found on the homepage here: http://security.bsd.uchicago.edu/bsdsaa/
Do you want to confidentially submit a system for review?
Contact the BSD ISO directly via firstname.lastname@example.org for anonymous & confidential submissions and questions.
|All of Us||Institute for Population And Precision Health||All of Us is a new research program from the National Institutes of Health (NIH). The goal is to advance precision medicine. Precision medicine is health care that is based on you as an individual. It takes into account factors like where you live, what you do, and your family health history. Precision medicine’s goal is to be able to tell people the best ways to stay healthy. If someone does get sick, precision medicine may help health care teams find the treatment that will work best.||https://allofus.uchicago.edu/||Under review|
|BSDAD||BSD/CRI||This system provides Active Directory services to the BSD and is critial to divisional and departmental functions.||–||Under review|
|BSD Faculty Website||BSDIS||This system is used to identify faculty and deliver data related to those faculty to the BSD Website Faculty website host for inclusion on the website. Updates will happen on a daily basis.||https://biologicalsciences.uchicago.edu/our-faculty||Under review|
|BSD Reporting Portal||BSD||–||https://bsdis.uchicago.edu/bsd-reporting-portal/||Under review|
|BSD User Forms||BSDIS||
Tool to allow select authorized users to request a) creation of new BSDAD user accounts and corresponding linked mailboxes in Exchange, b) disabling existing BSDAD accounts and placement of a standard out of office message. The intention of this tool was to standardize new account creation.
|Chicago Health Research Portal (Be The New Normal)||The Institute for Translational Medicine||The system is a public facing internet application to let human subject research study teams creating study postings for general public to search, browse and communicate with study teams to enroll in the studies. In addition, the application lets public users to create online profiles including personal information such as demographics, medical conditions etc which is later used by system to match users to research studies. Once the matchings are computed by the system both study teams and volunteers are notified by e-mail calling them to use application to interact with the application for research participant recruitment.
User interaction business rules enforces policies governing study team potential participant interactions and personal information disclosure through self consent. The communication and messaging is always within the application and never carried out by any other external means such as emails. Emails are only used to notify users of the system so that they can login and carry out all interaction and information exchange to be within the boundaries of the system.
|Genomic Prescribing System (GPS)||Center For Personalized Theraputics||
The Genomic Prescribing System (GPS) is a novel web-based portal used by physicians which displays interactive, patient-specific, pharmacogenomic results in the form of succinct, electronic clinical consults – all instantaneously available in real time during patient care.
Patient-specific results are provided not as raw genetic data, but as a patient-tailored synopsis of the information translated into clinical meaning, and including prescribing recommendations and suggested alternative medications.
Globus is a secure, reliable research data management service. With Globus, researchers can move, share, publish & discover data via a single interface – whether data are stored on a supercomputer, lab cluster, tape archive, public cloud or your laptop.
Globus also provides a platform for application integration and gateway development leveraging advanced identity management, single sign-on, search, authorization, and automation capabilities.
Researchers at hundreds of universities, national labs, government facilities, and other research institutions – plus a growing number of commercial companies – use Globus routinely as they work with data. Research computing managers and IT groups depend on Globus to make storage more accessible for their researchers, and to monitor and report on storage system usage. Developers use Globus to automate data workflows and build custom web applications–such as science gateways and searchable data portals–as well as mobile, desktop, and command line applications and services.
|Medical Education Data Warehouse (MEDW)||Pritzker School of Medicine||
Database, web server used to store medical education information from across PSOM units: UME, GME, CME and Simulation.
Aformentioned units will use data stored in the MEDW to develop reports for internal and external (i.e. accrediting bodies) use.
The server cluster provides mulitple shares for the department, its sections, and other departmental special projects.It can and is accessed by users in other BSD departments and by Hospital staff.
|Thirty Million Words (TMW Tech)||Surgery||
Progressive web app designed to integrate TMW’s research based interventions. The interventions are delivered to parents in medical environments such as maternity wards and pediatric clinics and content of the interventions will be available on an app that allows parents to engage on their own time.
Mammosphere is a patient engagement platform that empowers women to take control of their breast health. It allows patients to request, store and share their complete breast health information, including diagnostic quality images and prior mammograms, digitally and securely. This saves the patient time, money and unnecessary stress while allowing physicians easy access to the critical clinical information they need to make an accurate diagnosis. Mammosphere is powered by lifeIMAGE, the leading medical information network in the country.
The Mammosphere platform allows all types of clinical information, including breast health records required by the WISDOM study, to be acquired securely, digitally stored while maintaining their diagnostic quality, and easily shared with physicians, researchers, and patients. Mammosphere provides the digital platform for WISDOM Study participants to request and share the medical images and associated clinical information required to conduct the WISDOM Study. Mammosphere enables the WISDOM team to advance their clinical understanding of breast cancer screenings, as it is well proven that having historical clinical information alongside new imaging dramatically reduces the high rate of false positives in breast cancer screenings and supports early detection of malignancies allowing treatments to begin sooner.
As a provider partner for WISDOM, lifeIMAGE and Mammosphere will provide the University of Chicago with a lifeIMAGE Local Appliance (LILA). The WISDOM Fulfillment LILA is provided to your organization as a virtual software appliance that enables the digital fulfillment of breast image and report requests initiated by WISDOM study participants via Mammosphere. Installing this software allows easier fulfillment of these requests as part of your organization’s existing workflows and will also result in your organization’s name being available for selection by the patient in the Mammosphere platform. Once installed, requests arrive in a queue and take only minutes to fulfill by allowing you to pull exams directly from your PACS systems.
Additional information regarding these systems and their security rating is available upon request from the BSD ISO via email@example.com.