Dataset Information

Information security for compliance with select agent regulations.

ABSTRACT: The past decade has seen a significant rise in research on high-consequence human and animal pathogens, many now known as "select agents." While physical security around these agents is tightly regulated, information security standards are still lagging. The understanding of the threats unique to the academic and research environment is still evolving, in part due to poor communication between the various stakeholders. Perhaps as a result, information security guidelines published by select agent regulators lack the critical details and directives needed to achieve even the lowest security level of the Federal Information Security Management Act (FISMA). While only government agencies are currently required to abide by the provisions of FISMA (unless specified as preconditions for obtaining government grants or contracts--still a relatively rare or narrowly scoped occurrence), the same strategies were recently recommended by executive order for others. We propose that information security guidelines for select agent research be updated to promulgate and detail FISMA standards and processes and that the latter be ultimately incorporated into select agent regulations. We also suggest that information security in academic and research institutions would greatly benefit from active efforts to improve communication among the biosecurity, security, and information technology communities, and from a secure venue for exchange of timely information on emerging threats and solutions in the research environment.

SUBMITTER: Lewis N

PROVIDER: S-EPMC4486445 | biostudies-literature | 2015 May-Jun

REPOSITORIES: biostudies-literature

ACCESS DATA

Publications

Information security for compliance with select agent regulations.

Lewis Nick N Campbell Mark J MJ Baskin Carole R CR

Health security 20150501 3

The past decade has seen a significant rise in research on high-consequence human and animal pathogens, many now known as "select agents." While physical security around these agents is tightly regulated, information security standards are still lagging. The understanding of the threats unique to the academic and research environment is still evolving, in part due to poor communication between the various stakeholders. Perhaps as a result, information security guidelines published by select agen ...[more]

PMID: 26042864

Similar Datasets

Project description:ImportanceAlthough federal law has long promoted patients' access to their protected health information, this access remains limited. Previous studies have demonstrated some issues in requesting release of medical records, but, to date, there has been no comprehensive review of the challenges that exist in all aspects of the request process.ObjectiveTo evaluate the current state of medical records request processes of US hospitals in terms of compliance with federal and state regulations and ease of patient access.Design, setting, and participantsA cross-sectional study of medical records request processes was conducted between August 1 and December 7, 2017, in 83 top-ranked US hospitals with independent medical records request processes and medical records departments reachable by telephone. Hospitals were ranked as the top 20 hospitals for each of the 16 adult specialties in the 2016-2017 US News & World Report Best Hospitals National Rankings.ExposuresScripted interview with medical records departments in a single-blind, simulated patient experience.Main outcomes and measuresRequestable information (entire medical record, laboratory test results, medical history and results of physical examination, discharge summaries, consultation reports, physician orders, and other), formats of release (pick up in person, mail, fax, email, CD, and online patient portal), costs, and request processing times, identified on medical records release authorization forms and through telephone calls with medical records departments.ResultsAmong the 83 top-ranked US hospitals representing 29 states, there was discordance between information provided on authorization forms and that obtained from the simulated patient telephone calls in terms of requestable information, formats of release, and costs. On the forms, as few as 9 hospitals (11%) provided the option of selecting 1 of the categories of information and only 44 hospitals (53%) provided patients the option to acquire the entire medical record. On telephone calls, all 83 hospitals stated that they were able to release entire medical records to patients. There were discrepancies in information given in telephone calls vs on the forms between the formats hospitals stated that they could use to release information (69 [83%] vs 40 [48%] for pick up in person, 20 [24%] vs 14 [17%] for fax, 39 [47%] vs 27 [33%] for email, 55 [66%] vs 35 [42%] for CD, and 21 [25%] vs 33 [40%] for online patient portals), additionally demonstrating noncompliance with federal regulations in refusing to provide records in the format requested by the patient. There were 48 hospitals that had costs of release (as much as $541.50 for a 200-page record) above the federal recommendation of $6.50 for electronically maintained records. At least 6 of the hospitals (7%) were noncompliant with state requirements for processing times.Conclusions and relevanceThe study revealed that there are discrepancies in the information provided to patients regarding the medical records release processes and noncompliance with federal and state regulations and recommendations. Policies focused on improving patient access may require stricter enforcement to ensure more transparent and less burdensome medical records request processes for patients.

Project description:BackgroundThe importance of health privacy protections in the era of the "Facebook Generation" has been called into question. The ease with which younger people share personal information about themselves has led to the assumption that they are less concerned than older generations about the privacy of their information, including health information. We explored whether survey respondents' views toward health privacy suggest that efforts to strengthen privacy protections as health information is moved online are unnecessary.MethodsUsing Amazon's Mechanical Turk (MTurk), which is well-known for recruitment for survey research, we distributed a 45-item survey to individuals in the U.S. to assess their perspectives toward privacy and security of online and health information, social media behaviors, use of health and fitness devices, and demographic information.Results1310 participants (mean age: 36 years, 50% female, 78% non-Hispanic white, 54% college graduates or higher) were categorized by generations: Millennials, Generation X, and Baby Boomers. In multivariate regression models, we found that generational cohort was an independent predictor of level of concern about privacy and security of both online and health information. Younger generations were significantly less likely to be concerned than older generations (all P < 0.05). Time spent online and social media use were not predictors of level of concern about privacy or security of online or health information (all P > 0.05).LimitationsThis study is limited by the non-representativeness of our sample.ConclusionsThough Millennials reported lower levels of concern about privacy and security, this was not related to internet or social media behaviors, and majorities within all generations reported concern about both the privacy and security of their health information. Thus, there is no intergenerational imperative to relax privacy and security standards, and it would be advisable to take privacy and security of health information more seriously.

Project description:Rathayibacter toxicus is a species of Gram-positive, corynetoxin-producing bacteria that causes annual ryegrass toxicity, a disease often fatal to grazing animals. A phylogenomic approach was employed to model the evolution of R. toxicus to explain the low genetic diversity observed among isolates collected during a 30-year period of sampling in three regions of Australia, gain insight into the taxonomy of Rathayibacter, and provide a framework for studying these bacteria. Analyses of a data set of more than 100 sequenced Rathayibacter genomes indicated that Rathayibacter forms nine species-level groups. R. toxicus is the most genetically distant, and evidence suggested that this species experienced a dramatic event in its evolution. Its genome is significantly reduced in size but is colinear to those of sister species. Moreover, R. toxicus has low intergroup genomic diversity and almost no intragroup genomic diversity between ecologically separated isolates. R. toxicus is the only species of the genus that encodes a clustered regularly interspaced short palindromic repeat (CRISPR) locus and that is known to host a bacteriophage parasite. The spacers, which represent a chronological history of infections, were characterized for information on past events. We propose a three-stage process that emphasizes the importance of the bacteriophage and CRISPR in the genome reduction and low genetic diversity of the R. toxicus species.IMPORTANCERathayibacter toxicus is a toxin-producing species found in Australia and is often fatal to grazing animals. The threat of introduction of the species into the United States led to its inclusion in the Federal Select Agent Program, which makes R. toxicus a highly regulated species. This work provides novel insights into the evolution of R. toxicusR. toxicus is the only species in the genus to have acquired a CRISPR adaptive immune system to protect against bacteriophages. Results suggest that coexistence with the bacteriophage NCPPB3778 led to the massive shrinkage of the R. toxicus genome, species divergence, and the maintenance of low genetic diversity in extant bacterial groups. This work contributes to an understanding of the evolution and ecology of an agriculturally important species of bacteria.

Dataset Information

Information security for compliance with select agent regulations.

Publications

Information security for compliance with select agent regulations.

Similar Datasets

OmicsDI is part of the ELIXIR infrastructure

Tweets