Security Standards

To be authorized as a user, a M.D. Anderson Cancer Center (MDACC) employee must have clearance through the Information Services Security Department. New system users describe their specific needs with the User Liaison, and their scope of access is configured accordingly. Their name, department, telephone, pager, and box numbers, as well as an access profile are entered in the system user table. They are enabled to login with a password they are given verbally at orientation.

   Users who terminate employment with MDACC are inactivated as system users as of their termination date. Security sign-off forms are routed to CORe staff for terminated employees.

   State regulations for network and VAX computer access security monitoring are followed. These are documented separately. VAX systems analysts regularly log and monitor the system access and login activity and investigate unusual findings.

   Once in the system, all users are prompted for their login information. If they fail five times, their device will be unable to log in. All unsuccessful attempts to access the system are logged to a file that is reviewed by the database administrator. A password change is enforced for each user every three months. The passwords are stored in an encrypted format.

CORe has a system activity table with user's name, phone number, device, process identification, and current activity.

Access Standards

The CORe system is available 24 hours through any computer with an Internet connection.

All M.D. Anderson employees may use the system according to their needs for clinical trials information. They must have an institutional Employee ID, then contact CORe system staff to be defined as a user.

If you experience difficulty accessing the web site or logging into the system please contact the CORe System HelpDesk 713-745-2673 (5-CORe).

Privacy Standards

   All system users must complete the standard Information Services Security Policy (personnel acknowledgment) form. This policy applies to all personnel who use information resources at M.D. Anderson Cancer Center. The CORe system security access meets all applicable federal requirements.