UCSF Campus Report January 2008
UC Information Technology Leadership Council
January 31, 2008 - February 1, 2008
Office of Academic and Administrative Information Systems
ACADEMIC SYSTEMS
Secure Data Environment: Academic Research Systems (ARS) has established a secure environment for investigators to store sensitive study data; the Secure Data Environment (SDE) is built on a customized, restricted version of Microsoft SharePoint 2007. The SDE currently supports pilot users, and more users will be added throughout the remainder of the year.
Integrated Data Repository: The initial designs of the Integrated Data Repository have been completed and implementation has begun. The repository will be based on the NIH sponsored i2b2 framework and the Sybase IQ database. In concert with other members of the CTSA consortium, ARS is taking the lead in extending the i2b2 framework to meet the needs of translational research.
ADMINISTRATIVE SYSTEMS
PeopleSoft and Procure to Pay (P2P): The PeopleSoft 9.0 Upgrade is scheduled to go live on February 25; the system will be down from 7:00 p.m. February 15, through February 24. In conjunction with the upgrade, Procure to Pay (P2P) will be live for a pilot group of users.
NETWORK SERVICES
Next Generation Metropolitan Area Network (NGMAN): UCSF and AT&T have signed a contract for the construction of UCSF’s Next Generation Metropolitan Area Network (NGMAN). NGMAN is based on Dense Wave Division Multiplexing (DWDM) and will replace UCSF’s current ATM/SONET network. Construction will begin in the spring of 2008; implementation is expected to begin in early 2009.
SECURITY
UCSF Information Security Campus Risk Assessment: Enterprise Information Security has been conducting a campus-wide effort to document information security risk and the campus’s ability to meet UCSF Minimum Network Standards. In accordance with UCOP policy, this will identify high-risk areas and will allow the campus to reduce the overall risk of information security incidents. Several high-risk areas have already been identified by this assessment; these areas contain information that would negatively impact the campus if exposed, but do not fall under the commonly thought of categories such as ePHI and Personal Information.
e-Discovery Efforts: With the change in Federal Civil law in regards to electronic discovery, Enterprise Information Security has been working with RMIS and the UCSF Office of Legal Affairs to respond to e-discovery requests. This work has lead to UCSF being considered a model campus for e-discovery activities within UC, and to UCSF procedures and forms being used at other campuses, including UCOP, to respond to e-discovery requests.
Medical Devices MCA: Enterprise Information Security has been leading a campus and Medical Center effort to identify, assess and document all medical devices within UCSF, and to develop a process to identify future devices. This activity is in response to a Management Corrective Action, and has required substantial coordination with numerous UCSF entities including the Privacy Office, Purchasing, Medical Center, SFGH and various schools. Although it was initially assumed there were many medical devices within UCSF, only three devices have currently been located within the campus.
IT GOVERNANCE
The UCSF CIO Group is proposing a revised governance structure that more closely reflects the actual processes in place for determining policy and financing for applications, architecture and infrastructure; a diagram of the draft proposed structure is attached.
