A five-safes approach to a secure and scalable genomics data repository

• Published in: iScience Vol. 26; no. 4; p. 106546
• Main Authors: Shih, Chih Chuan, Chen, Jieqi, Lee, Ai Shan, Bertin, Nicolas, Hebrard, Maxime, Khor, Chiea Chuen, Li, Zheng, Juan Tan, Joanna Hui, Meah, Wee Yang, Peh, Su Qin, Mok, Shi Qi, Sim, Kar Seng, Liu, Jianjun, Wang, Ling, Wong, Eleanor, Li, Jingmei, Tin, Aung, Cheng, Ching-Yu, Heng, Chew-Kiat, Yuan, Jian-Min, Koh, Woon-Puay, Saw, Seang Mei, Friedlander, Yechiel, Sim, Xueling, Chai, Jin Fang, Chong, Yap Seng, Davila, Sonia, Goh, Liuh Ling, Lee, Eng Sing, Wong, Tien Yin, Karnani, Neerja, Leong, Khai Pang, Yeo, Khung Keong, Chambers, John C., Lim, Su Chi, Goh, Rick Siow Mong, Tan, Patrick, Dorajoo, Rajkumar
• Format: Journal Article
• Language: English
• Published: United States Elsevier Inc 21-04-2023; Elsevier
• Subjects: Data encryption; Data storage representation; Genomics; Data encryption; Data storage representation; Genomics
• ISSN: 2589-0042; 2589-0042
• DOI: 10.1016/j.isci.2023.106546

Genomic researchers increasingly utilize commercial cloud service providers (CSPs) to manage data and analytics needs. CSPs allow researchers to grow Information Technology (IT) infrastructure on demand to overcome bottlenecks when combining large datasets. However, without adequate security controls, the risk of unauthorized access may be higher for data stored on the cloud. Additionally, regulators are mandating data access patterns and specific security protocols for the storage and use of genomic data. While CSP provides tools for security and regulatory compliance, building the necessary controls required for cloud solutions is not trivial. Research Assets Provisioning and Tracking Online Repository (RAPTOR) by the Genome Institute of Singapore is a cloud-native genomics data repository and analytics platform that implements a “five-safes” framework to provide security and governance controls to data contributors and users, leveraging CSP for sharing and analysis of genomic datasets without the risk of security breaches or running afoul of regulations.
[Display omitted]
•RAPTOR implements a “five-safes” framework for security and governance of genomic data•RAPTOR provides policy-compliant access to cloud computing for sensitive genetic data•We demonstrated proof of concept for federated analysis using GA4GH protocols•RAPTOR is an option as a trusted custodian of national-scale genomic data
Genomics; Data encryption; Data storage representation