Monitor user access requirements#

This task is the responsibility of Project Team.

At the Alan Turing Institute, there are a number of requirements users need to complete before they can acccess a TRE.

These requirements are:

  1. Signing our Terms of Use

  2. Completing the appropriate level of training

The specific requirements (for instance, the exact Terms of Use to sign, or the specific training modules to complete) differ depending on the nature of the project, and the role of the user.

In the Turing TRE, we identify 4 different types of user:

  • User on standard project: A standard researcher

  • User on project handling NHS patient data: A researcher who is working on a project with NHS patient data

  • User with elevated access: A user who has additional rights to, for instance, ingress/egress data, make classification decisions, request TRE shut-off or teardown

  • User on project handling NHS patient data with elevated access: The same as a user with elevated access, but on a project handling NHS patient data.

You can see the different requirements on the following diagram:

User access requirements

Complete user training#

  1. Based on the needs of your users, draft an instructions email to each of them. Use the relevant template found in the SharePoint folder under user-instructions based on the kind of user they are in the table above. Depending on the template, this will include links to the following training guides as appropriate:

  2. For the GDPR and Cyber Security Training, it’s possible that the users will not have the relevant certificates saved, or need to (re)complete the trainings.

    • Important: Send an email to Professional Development (professionaldevelopment@turing.ac.uk) requesting all the certificates listed on the GDPR and Cyber Security Training page for each of the users, and instructions on how to complete missing or out of date trainings

    • You’ll need to forward these instructions to the users so they can (re)complete the trainings and provide you with the certificates

  3. [Optional] Add instructions regarding any additional training (for instance, showing affiliation with a particular research body) required for the project to this email. Inform Trusted Research Environments Service Area (TRESA) if you plan to do this, so they know what additional training certificates to expect.

  4. Ensure that certificates from all required trainings are collected and added to the user-information -> training-certificates folder.

Note: Trusted Research Environments Service Area (TRESA) will also send the relevant Terms of use document for each of the users to sign.