The “Scalable Governance, Control and Management of FAIR Sensitive Research Data” project is a national collaboration to deliver a secure, trusted and scalable environment for data governance, control and management services for data custodians and secure remote data analysis environments for research users.

Research Users


The Research Users’ Community of Practice (CoP) aims to bring together researchers working with sensitive data for purpose of analysis. Here you can find shared content developed by the CoP to support researcher education and knowledge base.

  • Monash Secure eResearch Platform (SeRP) is a secure environment for sharing research data for collaboration and analysis, within the control and governance of the data custodian. Monash SeRP allows the Data custodian or the delegated project manager (Data Custodian) to have visibility and control over how their data is being used by other approved researchers. Access training material here.

Data Custodians

The Data Custodian  Community of Practice (CoP) aims to document and communicate Data Custodian requirements of secure data access systems to assist platform operators to meet legislative and regulatory requirements and allow custodians to release data for research.

  • Building a Community of Practice (CoP) to support scalable governance and the management of FAIR sensitive data use. Read more

  • The following is an environmental scan of publicly available requirements of data custodians

    The Environmental Scan was conducted to collect and review publicly available requirements of data custodians. Used to identify best practice guidelines for operators of secure data access environments. Read more.


Research Infrastructure

The Research Infrastructure Community of Practice (CoP) aims to bring together research infrastructure providers who are or intend to, deliver services for sensitive data and its analysis. Here you can find shared content to help the community to develop and deliver safe and secure services.

  • Research Infrastructure CoP Infrastructure and Capability Assessment. Read more

  • Access diagram here.

  • Access Harmonised Security Control description and cybersecurity framework here.

  • Research Infrastructure providers are required to collect and handle personal information in accordance with 10 Information Privacy Principles (IPPs). Read more.