Concept↦Data Management↦Server Management↦Data Storage
What is it? Why is it important?
A server is used as a central storage device for study data. It should run continuously in order to guarantee:
- Ongoing functionality:
- Update of network security
- Automatic data back-up
- Protection against break-down
- Existence of emergency data recovery procedures
- Security:
- Strictly monitored access and user control with ongoing audit-trail that documents any changes to the data and other functionalities of the study database (e.g. access management)
- Restricted access to server presmises in order to protect against theft, accidental server damage, data disclosure, alteration or destruction
- Storage infrastructure:
- Ongoing temperature- and humidity surveillance
- Fire-, extensive dust-, and vibration protection
- Protection against rodent infestation
What do I need to do?
As a SP-INV familiarise yourself with server management requirements, such as to:
- Carefully plan server acquisition in order to ensure functionality and security requirements can be met.
- Ensure study data is stored centrally on a protected server and not on a laptop, desktop, hard drive or any removable storage device
In addition:
- Access to server storage premises should be documented and traceable
- Server access codes should be kept in a secure place, and only be available to server administrator(s)
Even when a server is not kept at the study site, but is under the administration of an institutional computer department, the responsibility of server functionality and data security remains with the SP-INV.
More
Means to protect your server and the security of your study data include to:
- Keep any firewall, security-related upgrades, and virus protection up-to-date
- Allow only delegated, and knowledgeable staff handle problems within the operating system
- Install an electronic recording system able to document access to server storage premises
- Install an alarm system that monitors and alerts when storage conditions become unfavourable
- Have procedures and equipment ready in order to responds to unfavourable conditions (e.g. air-conditioner, humidifier)
- Only have password protected server access
- Encrypt any forwarded sensitive data. Define a secure method of data transfer
- Prevent any unnecessary server relocation
Where can I get help?
Your local Research Support Centre↧ can assist you with experienced staff regarding this topic
Basel, Departement Klinische Forschung (DKF), dkf.unibas.ch
Lugano, Clinical Trials Unit (CTU-EOC), ctueoc.ch
Bern, Department of Clinical Research (DCR), dcr.unibe.ch
Geneva, Clinical Research Center (CRC), crc.hug.ch
Lausanne, Clinical Research Center (CRC), chuv.ch
St. Gallen, Clinical Trials Unit (CTU), h-och.ch
Zürich, Clinical Trials Center (CTC), usz.ch
References
ICH GCP E6(R2) – see in particular guideline
- 5.5. Trial Management, data handling, and record-keeping