We have had this issue in relation to records for koiwi (human remains). We use Vernon for collection management and have set up our permissions to block access for most users to any records flagged as sensitive. We would only allow access to approved researchers on site, by giving access through an account with specific permissions. We have not pursued remote access in any way at this stage, and do not allow anyone to have electronic files on their own laptops etc. It was quite straightforward to set up - Vernon provided us with a small script to load and we just set permissions as required.
Kate Muirhead Collections Manager - Documentation Canterbury Museum Rolleston Avenue, Christchurch 8001 NEW ZEALAND Telephone 64 3 366 5000 Direct Dial 64 3 366 9429 extn 875 Facsimile 64 3 366 5622 Email kmuirhead at canterburymuseum.com www.canterburymuseum.com The contents of this email are confidential. If you have received this communication by mistake, please advise the sender immediately and delete the message and any attachments. The views expressed in this email are not necessarily the views of Canterbury Museum. -----Original Message----- From: Vreeswijk, Jessica RBCM:EX [mailto:[email protected]] Sent: Wednesday, 12 July 2006 4:40 a.m. To: mcn-l at mcn.edu Subject: [MCN-L] Providing access to electronic archival documents I am also seeking the collective wisdom of this group --- any advise or information you can share would be much appreciated! We need to provide researchers, under a confidentiality agreement, access to electronic archival documents that are restricted under our privacy laws (ie highly sensitive personal data kept in government and public institution records). I am investigating ways to implement encryption or other control measures to ensure these documents are not released or compromised while in transit or in use. Has anyone out there set up policies and procedures or systems for access to electronic records? We have initiated requirements for the researcher to secure their workstation (laptop or desktop) before we give them files however we are relying on the researcher to abide by the agreement. I would prefer not to provide the researcher with the files themselves, rather provide access remotely through a secured connection or such. However, I am not aware of any solutions providing that option and am not familiar with how secure that could actually be. Thank you in advance for any information you can provide! Please feel free to email me directly. Thank you, Jessica Vreeswijk IT Project Manager Royal BC Museum 675 Belleville St. Victoria, BC (250) 356-0693 jvreeswijk at royalbcmuseum.bc.ca _______________________________________________ You are currently subscribed to mcn-l, the listserv of the Museum Computer Network (http://www.mcn.edu) To post to this list, send messages to: mcn-l at mcn.edu To unsubscribe or change mcn-l delivery options visit: http://toronto.mediatrope.com/mailman/listinfo/mcn-l
