Research and Information Security Kit (RISK)

Purpose and Scope:

This platform aims to promote a security-first culture in research by providing tools, resources, and best practices for maintaining data integrity and protecting research subject privacy.

User Responsibilities:

You are responsible for understanding and complying with all relevant laws, regulations, and ethical guidelines, including but not limited to the ISO 27001 standard, the Tri-Council Policy Statement on Ethical Conduct for Research Involving Humans (TCPS 2), and the General Data Protection Regulation (GDPR). You agree to use RISK solely for lawful research purposes and in a manner that respects the rights of others. You are responsible for implementing appropriate security measures, such as strong passwords, encryption standards, and chain of custody reporting, to protect sensitive data.

Platform Usage:

RISK is provided as-is, and we make no warranties or guarantees about its functionality, accuracy, or availability. We assume no responsibility for any damages or losses incurred as a result of using this platform. You acknowledge that your use of RISK may be monitored for security purposes.

Public Consultation and Input (pending):

This platform encourages public consultation and input to build trust between researchers, research subjects, and institutions. You agree not to misuse or disrupt the public consultation process.

Researcher Policy Adoption and Training:

RISK provides resources for adopting and implementing security policies, as well as training opportunities. You agree to make reasonable efforts to stay informed about evolving security threats and best practices.

Institutional Metrics and Security Alerting:

This platform may provide metrics and security alerts to institutions to help them understand and manage risks. You acknowledge that receiving these communications is your responsibility, and you agree not to rely solely on RISK for security information.

Data Integrity and Privacy:

You are responsible for ensuring the integrity of data used in your research and protecting the privacy of research participants. You agree not to share or disclose sensitive data through this platform without appropriate authorization and safeguards.

Intellectual Property:

Any intellectual property created using RISK remains the sole property of the creator, subject to any applicable agreements between you and your institution.

Termination:

We reserve the right to suspend or terminate your access to RISK if we believe that you have breached these terms of service.

Governing Law:

These terms of service are governed by and construed in accordance with the laws of Canada, without giving effect to any conflict of laws principles.