QS0015-02: Data Management Policy

Question 1

QS0015-01: Data Management Policy

What are the Data Owner responsibilities?

Answer 1

Understanding use and risk associated with the information

Classification

Ensuring measures are in place to properly secure.

Question 2

QS0015-01: Data Management Policy

What agreement must be signed by a third-party vendor when transferring electronic storage media for sanitation?

Answer 2

A third-party vendor non-disclosure agreement.

Question 3

QS0015-01: Data Management Policy

What are data access restrictions?

Answer 3

Access to data must be restricted to users or information systems with a legitimate business need and authorized by the data owner or an authorized delegate of the owner.

Question 4

QS0015-01: Data Management Policy

May Personally Identifiable Information (PII) data leave the AWS network?

Answer 4

PII data should never leave the hosted, protected network, even to approved, connected devices. For example, developers must not copy a LIMS database, or application files for such a site onto a local device. It must remain on servers provided for this purpose within the network.

Question 5

QS0015-01: Data Management Policy

Who is responsible for assuring backup procedures, retention, and data protection?

Answer 5

Application owners

Question 6

QS0015-01: Data Management Policy

How would you describe the data disposal process written within the policy?

Answer 6

1. Data disposal is permissible by or at the direction of the data owner.
2. Data owners must follow data retention and disposal procedures.