Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Utah Population Database reports 94 of 97 NIST controls implemented; questions raised about opt-out and data removal
Summary
Dr. Nicola Kemp reported an internal security audit of the Utah Population Database that found 94 of 97 NIST SP 800-171 protections fully implemented; three items are in remediation. Committee members asked detailed questions about individual opt-out, deletion and data governance.
Dr. Nicola Kemp, director of the Utah Population Database (UPDB) at the University of Utah’s Huntsman Cancer Institute, presented the results of the database’s biennial internal security audit. UPDB serves as a statewide research data resource that links records from multiple contributors to support biomedical and public-health research.
Kemp said UPDB follows the NIST Special Publication 800-171 security framework and maintains a system security plan that is audited every two years. The audit reviewed the system security plan’s 97 checklist items; Kemp reported 94 were found fully implemented and effective, and three protections required improvement. She said two of those three items were low-risk and one was moderate-risk; none were categorized…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat
