ISAC Data Protection and Privacy 3

Question 1

Which ISO/IEC standard provides a framework specifically for information security management systems that cytometry labs can certify against to demonstrate data protection controls?

Accepted Answer

ISO/IEC 27001

Answer

ISO/IEC 27001 specifies requirements for establishing, implementing, and continually improving an Information Security Management System (ISMS).

Question 2

A biobank stores cytometry data alongside donor genetic profiles. Under the Common Rule (45 CFR 46), what additional protection applies to stored identifiable biospecimens used in future research?

Accepted Answer

IRB review and often re-consent for new research uses

Answer

The revised Common Rule requires IRB review and, in many cases, broad consent or re-consent when identifiable biospecimens are used in secondary research.

Question 3

Which access control model is most appropriate for a multi-institutional cytometry network where data access should be determined by a user's job function rather than individual identity?

Accepted Answer

Role-based access control (RBAC)

Answer

RBAC assigns permissions based on organizational roles, making it ideal for research networks where job function determines legitimate data needs.

Question 4

A GDPR data subject requests deletion of their cytometry data from a research cohort. Under which circumstance may the research institution legitimately refuse this request?

Accepted Answer

Processing is necessary for public interest scientific research and erasure would seriously impair the research objective

Answer

GDPR Article 17(3)(d) allows refusal of erasure requests when processing is necessary for scientific research and erasure would seriously impair the research objective.

Question 5

Which encryption standard is currently recommended by NIST for protecting cytometry data at rest on laboratory storage systems?

Accepted Answer

AES-256

Answer

NIST recommends AES-256 as the current standard for encrypting sensitive data at rest due to its security strength and widespread implementation.

(ISAC) International Society for the Advancement of Cytometry Practice Test

(ISAC) International Society for the Advancement of Cytometry Practice Test

ISAC Data Protection and Privacy 3