Skip to Main Content

Research Data Management

How to describe your data storage

In your DMP, you should describe where the data will be stored and backed up while the research is underway. There are two areas which must be addressed here: 

  1. How will data and metadata be stored and backed up while the research is underway?
  2. How will you ensure data security and protection of sensitive data?

These questions relate to the 'active research' stage of the project, while you are accessing or collecting data, analysing these data and writing up results. The section, "Data sharing and long-term preservation"  provides guidance on what to think about towards the end of the study, and after the research has concluded. 

How will data and metadata be stored while the research is underway?

  1. Describe where the data will be stored and backed up during research activities and how often the backup will be performed. It is recommended to store data in least at two separate locations.
  2. Give preference to the use of robust, managed storage with automatic backup, such as provided by IT support services of the home institution. Storing data on laptops, stand-alone hard drives, or external storage devices such as USB sticks is not recommended.

Microsoft Teams, SharePoint Online and OneDrive are all provided by RCSI as 'out of the box' products for storing and sharing research data. 

  • OneDrive is a good option for individual work and when you want to keep your files private. You can also use OneDrive to share a file or folder with another person. However, research data that is held on OneDrive will not be accessible to you or other team members should your account at RCSI expire, for example, if you were to move on to another university or organization.
  • SharePoint is a good option for team work, and is ideal for storing research data files that need to be accessible to members of a research team. Research data that is stored on SharePoint will remain accessible to other team members who are listed to access the project folder (or site) even if team members change over the course of the research.

SharePoint is a cloud storage solution and is ideal for storing and sharing research data and documentation with team members. The Principal Investigator of a project can request a Teams site on SharePoint where they and their team can safely store and access all research data and documentation in a single location. The Teams site is suitable for a research project that will require anything up to 2TB of storage, and can be used to safely store data and documentation, including research tools, signed consent forms, lab notes and metadata. If you require additional storage space on SharePoint for your project you should contact the IT department to discuss options.

The owner of the Teams site has full control privileges to this site - they can add and remove members to the Teams site, as staff come and go from the project. SharePoint is used in RCSI primarily for internal collaboration to avoid any potential data leakage. If you have team members who are external to RCSI (external guests), and need access to the Teams site you should indicate this when you request the Teams site. 

 

How to access your Teams site: Some people use the SharePoint online interface to view all of the files and folders belonging to their research project team, while others are more comfortable using the Teams interface to do so - but both options work well.

SharePoint and personal data: Signed consent forms and other personal data gathered in the course of the research can be stored within your project SPO for the duration of the research project. Please note: When applying for ethical approval for research with human subjects, you are required to upload templates of the consent form, participant information leaflet, study protocol, questionnaire/survey if relevant, along with the Data Protection Impact Statement to RIMs. You are not asked to submit signed consent forms via RIMs.

For large data projects: If you need more than 2TB of storage for your research project, additional storage space can be purchased by the project PI using grant funds. Please contact Research IT to discuss options. If you require extra space for data that contains personal data please flag this with Research IT so they can direct you to a solution that is GDPR-compliant (i.e. data is stored to servers within the EU region).

OneDrive is Microsoft's cloud-based storage solution, similar to Google Drive and Dropbox, allowing you to store all your personal files securely in one place. Every staff member at RCSI is provided with a OneDrive via our institutional MS Office 365 plan. OneDrive is a cloud-based storage solution, and you can access your files from anywhere using a web browser (Chrome, Edge etc) or mobile device. OneDrive is appropriate for personal work files, for example, versions that are not ready to share with others, as only the owner has the access rights to view, edit, or share the content. For more information please refer to the RCSI IT Guide on OneDrive.

The data that you collect, organise, prepare, and analyse underpin all of your research, and backups are an important instrument to ensure that data, and related files, can be restored in the event of loss or damage. Some of the most common causes of data loss, such as hardware failure and human error, can be prevented or minimised through an active data backup policy. 

Files that are stored on both OneDrive and SharePoint are hosted in the Microsoft cloud and are backed up to an alternative location within the EU (GDPR) region. Microsoft manage this process as part of their service agreement with RCSI. 

The ideal backup strategy will typically include both an online backup cloud service and an offline backup device (e.g. external hard drives, USB) to ensure your data is secure no matter what happens to your device. If you are working with sensitive research data, backups of the data must be protected against unauthorised access in the same manner as the original files and you may need to think a little bit more carefully about your backup strategy and where it is appropriate to store your data. In general, confidential data should not to be copied to or stored on a portable computing device or a non-RCSI owned computing device. You should clearly state in your backup strategy how often backups will be made and who will be responsible for doing so. In many instances, backups of your data can be automatically created using various software and data storage services. You should routinely test your backup solution to ensure you can recover your data in the event that you do actually need to restore from a backup.

For more information please see the CESSDA Data Management Expert Guide: Backup.

The following RCSI Research IT resources are suitable for processing large datasets that require compute resources that exceed what is possible with a desktop computer or a single server e.g. ‘omics research: 

  - Remote High-Performance Compute at iCHEC

  - Local Compute

  - Networked Storage

                                                      - Long-term archival in Azure Cloud

If you require any of these resources, please contact the Systems Administrator (Research IT Service) (research-it@rcsi.com) to discuss options for your research study. Research IT have provided a helpful visual overview of the Research IT Infrastructure here.

The RCSI Research IT Request Form can be used to request access to RCSI Research IT resources, or changes to resources as follows: 
- Remote High-Performance Compute at iCHEC
- Local Compute
- Networked Storage
- Long-term archival in Azure Cloud

How will you ensure data security and protection of sensitive data?

In your DMP you should: 

  • Explain how the data will be recovered in the event of an incident. You should give preference for institutionally-provided storage (SharePoint or OneDrive) for this reason when storing your research data. 
  • Explain who will have access to the data during the research and how access to data is controlled, especially in collaborative partnerships.
  • Consider data protection, particularly if your data is sensitive for example containing personal data, politically sensitive information, or trade secrets. Describe the main risks and how these will be managed.
  • Explain which institutional data protection policies are in place. Please refer to the RCSI IT Security Policy for data security, disaster recovery and backup strategy.

Confidential data at rest on computer systems owned by RCSI and located within controlled spaces and networks are protected by strict access controls that authenticate the identity of those individuals who access the specific system or data. 

 

Confidential data should not be copied to or stored on a portable computing device or a non-RCSI owned computing device. However, in situations that require confidential data to be stored on such devices, data owners and device users must acknowledge how they will ensure that data is encrypted and how encrypted data will be accessible by the owner in the event that an encryption key becomes lost or forgotten. Methods to meet this requirement include:

  • Maintaining an accessible copy of the data on a server managed by RCSI IT
  • Escrowing the encryption key with a trusted party designated by the data owner
  • Using whole-disk encryption technologies that provide an authorised systems administrator access to the data in the event of a forgotten key.

For more information see the RCSI Data Encryption Policy. 

Below are some general recommendations to help you secure and protect your devices which may contain research data (these have been adapted from the UCD Device Security Recommendations).

  • Update all devices, software, and plug-ins on a regular basis: Check for operating system, software, and plug-in updates often or, if possible, set up automatic updates.
  • Install and regularly update protective software.
  • Control access to your machine: Don't leave your computer in an unsecured area, or unattended and logged on, especially in public places. The physical security of your device is just as important as its technical security.
  • Use secure connections: When connected to the Internet, your data can be vulnerable while in transit. While on the RCSI campus use a wired connection or eduroam for wireless connection. Use remote connectivity and secure file transfer options when off campus.
  • Protect sensitive data: Reduce the risk of identity theft by minimizing the storage of sensitive information on your device. Securely remove sensitive data files from your hard drive or use encryption tools to protect sensitive files you need to retain. 

 

For more information please see the RCSI Data Encryption Policy.

At RSCI, much of our research depends upon the secure storage and processing of health data which are often personal data. The processing of personal data must be carried out in accordance with the General Data Protection Regulation, and researchers working with personal data should use one of the following options to ensure the security of this data: 

RCSI-provided SharePoint and/or OneDrive: Data should be stored using the cloud storage provision at RCSI as these files are hosted in the Microsoft cloud, and the geographical location is restricted to the European Economic Area. Therefore, they are capable of GDPR compliance. 

Alternative file storage systems that are not provided via RCSI, such as DropBox and Google Drive, may not provide any restriction on the geographical location of file storage and are therefore not GDPR compliant. These alternative options must not be used for any data that is subject to GDPR rules, or provided to you by a third party with similar restrictions or user conditions. 

Isilon storage (PowerScale) is a centrally funded a substantial storage system that is highly scalable (i.e. possible to add more storage nodes in order to handle the increased workload). It provides a single central location for active research data which is highly resilient compared to point solutions. Isilon storage is sufficiently secure and auditable to support the storage of Personal Data. It is integrated with the Active Directory so that access to data is controlled through the Active Directory, and it is easy to audit who has access to any data. For data which the Data Management Plan mandates to be retained beyond the lifetime of the funded project and for which there is no suitable public repository, it can be archived to storage within Microsoft Azure while remaining manageable from the Isilon system.

Local Compute Cluster: This is a small Slurm cluster onsite at RCSI (Dublin) and it works in a similar way to ICHEC Kay but at a much smaller scale. The Local Compute Cluster is physically secure with encrypted disks. It is CIS (Centre for Internet Security) Hardened, which provides additional security to the Linux operating system. The Local Compute Cluster is also integrated to Active Directory so identity is assured. Because of these and other security measures, it can be used to process personal data. The Systems Administrator (Research IT Service) (research-it@rcsi.com) can install required software on the cluster, on request. 

External access: There is a controlled capability to make specific data on the storage system accessible to external collaborators; however, they have to be registered with RCSI in order to maintain audit trails and for technical reasons related to access control.

Encryption is simply the process of translating a file into meaningless code. To translate this code back into the original meaningful information a key (often a password) is required. Recovering information from encrypted files without the key is nearly impossible. The key/password for an encrypted file should never be sent with the encrypted file, an alternative method (such as over the phone, or a text) should be used to send the key/password separately. RCSI uses BitLocker Encryption, TLS. SMTP TLS (Transport Layer Security) for encrypting confidential and other college sensitive data (please see the RCSI Data Encryption Policy). All RCSI Windows laptops come with this BitLocker Encryption. Both devices and individual files can be encrypted.

 

 Device Encryption:

Device encryption helps to protect information on your device should it go missing or get stolen. If your device is encrypted, the data on it can only be accessed by people who've been authorized (usually through a password). Again, a strong password is required to ensure your encrypted device is truly secure. Device encryption is already available on supported devices running any Windows 10 edition (see Microsoft for further information).

 File Encryption:

File encryption can be used to store sensitive data on portable devices (such as a USB drive), to securely email it, or just to add an additional layer of security onto your existing data management.

 

A strong password is a key part of ensuring data security, whether you are simply storing your own research files or sending files to collaborators. Access to all RCSI information systems and networks must be controlled via strong password authentication schemes.

 

 

 

The RCSI’s password policy is as follows:

  • Passwords must contain a minimum of 8 characters.
  • Those characters must include a combination of any 3 of the 4 below items:
  • English uppercase characters (A through Z)
  • English lowercase characters (a through z)
  • Base-10 digits (0 through 9)
  • Non-alphanumeric (for example, !, $, #, %)
  • User passwords will expire every 90 days and must be reset at that time.
  • Password history is enabled and set to 24
  • Accounts will lock out after 10 failed logon attempts.

 

Passphrases are also recommended as they are often easier to remember, but much more difficult to hack. A passphrase is a password made up of (at least) four randomly chosen words. It is as easy to remember as four randomly chosen letters, but it results in very strong passwords. For example a passphrase could be simple (e.g. apple tower africa elephant ) or more complicated to make it compatible with a service that insists on punctuation marks and capitals (e.g. Ap.ple.Tower@fricaElephant). Please see the RCSI System Access Control Policy and the University of Edinburgh's Guide to Choosing a Strong Password for more information and tips.

In order to protect your data and information, all files and documents should be encrypted before transferring them. Researchers should follow RCSI acceptable use policies when transmitting data and must take particular care when transmitting or re-transmitting confidential data received from non-RCSI employees. Transmission of data via RCSI email is automatically encrypted using TLS. SMTP TLS (Transport Layer Security) is the mechanism by which two email servers, when communicating, can automatically negotiate an encrypted channel between them. RCSI has configured mail flow to ensure that TLS is always used for email transmission. For more information please see the RCSI Data Encryption Policy.

 

Additionally manual encryption of attachments helps to protect your data and information if either the recipient’s or your email account is compromised. The encrypted files cannot be viewed by anyone, including yourself, without the decryption password, which should be sent to the recipient using a different transfer method (e.g. over the phone or via text). 

How to email files securely

  • Save the confidential information to a Microsoft Office document, such as Microsoft Word or Excel.
  • Encrypt the Microsoft document by password protecting it using a strong password.
  • Attach the encrypted document to the email.
  • Send the password for the encrypted document separately, either in person, over the phone or by text.

HEAnet FileSender is used within the Irish Higher Eudcation sector as a secure way to share big files. FileSender allows you to send large files to anyone and offers end to end encrytion that is suitable for sending sensitive data. FileSend is a federated service, so you should log in with you RCSI credentials to use this service.More information on HEAnet FileSender.