Research Information Security
The Research Information Security (RIS) Workgroup within the Veterans Health Administration (VHA) Office of Research Oversight (ORO) conducts onsite and remote compliance assessments of VHA facility research programs. In addition to these assessments, the RIS Workgroup remotely manages reports of Information Security incidents and provides remote and on-site Technical Assistance as needed. The primary focus of the RIS Workgroup's oversight activities is to assist VHA research programs in enhancing and improving their facility Research Information Security practices so that Veteran research subjects’ personal information and other VA research data are appropriately protected.
You can email the RIS staff at ORORISP@va.gov.
Additional Links
National Institutes of Standards and Technology (NIST)
Special Publication 800-53 Revision 5
Security and Privacy Controls for Information Systems and Organizations
https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
VA Handbook 6500
Risk Management Framework for VA Information Systems
https://www.va.gov/vapubs/viewPublication.asp?Pub_ID=1255&FType=2
VA Office of Information and Technology
Office of Information Security
Knowledge Service
https://dvagov.sharepoint.com/sites/OITOIS/KnowledgeService/Pages/Home.aspx (Internal VA website)
VHA Directive 1605.01
Privacy and the Release of Information
VHA Privacy Office
https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=3233
