What is the California State CPHS Data Security Assessment service?

Overview

The Information Security Office (ISO) offers an assessment service to help the campus research community comply with California State Committee for the Protection of Human Subjects (CPHS) data security requirements. An ISO Security Analyst will engage with research staff and/or primary IT support staff to evaluate IT systems according to state-mandated security standards.

How the Assessment Works

During the assessment, an analyst will review your IT environment to ensure it meets specific electronic safeguards required by the state. This typically involves:

• Reviewing data storage and transmission methods.
• Evaluating access controls and encryption.
• Verifying compliance with the CPHS Electronic Safeguards Questionnaire.

Documentation and Resources

• KB0015585 - CPHS Questionnaire Guide for Electronic Safeguards
• CPHS Data Security Assessment Service Offering