Overview

Background

This project is the next step from the report completed in MVM317 which explored which actions should be taken in the short, medium, and long term to move towards compliance with the framework agreements and the NHS Lothian Requirements.  

This project’s output will benefit the researchers and staff in UoE by creating a uniform approach for guidance on appropriate IT systems, services, and processes to use to help researchers comply with the IT requirements of The Framework. 

Overview of the NHS Lothian Health Board Framework Agreement  

The NHS Lothian Health Board (LHB) Framework Agreement is an essential legal document that has been officially ratified through court proceedings. This Framework Agreement sets up a structured and solid foundation for managing the exchange of data and information between participating entities, including the University of Edinburgh (UoE) and related partners.  

Key aspects covered under this agreement include the principles of ethical management, governance, delineation of employment responsibilities, intellectual property rights, and the protocols for reporting. This comprehensive document is crucial for setting the standards and guidelines with which data or information shared by the Lothian Health Board is to be handled. 

For researchers and staff at the University of Edinburgh, The Framework serves as a detailed guide on how to manage and utilise the provided data responsibly. It ensures the maintenance of data integrity and supports the adoption of best practices throughout all facets of the agreement. Additionally, the Framework outlines the legal requirements and established protocols that define and guide the work performed by researchers and staff, ensuring that all activities conform to the highest standards of legality and ethical conduct.  

 

Scope

The scope of this project is to produce a resource tool to provide guidance for those UoE staff who contribute in agreed joint research activity, governed by The Framework, on appropriate use of UoE recommended IT systems, services and processes for their requirements. The project will meet with Subject Matter Experts (SMEs) across CMVM to gather requirements and conduct analysis on research examples, IT and Data administrative processes, and assess the IT tools used for their projects. A due diligence of the IT tools will be conducted in the project and presented in D4.1 and D4.2.  The primary deliverable of the project will be a SharePoint site to act as a single point of digitised information to present relevant UoE IT guidance for use by all UoE stakeholders involved in conducting agreed joint research projects, where the Framework applies. The full development of the SharePoint site (O1) lies within CMVM, and there is no requirement for involvement from the SharePoint Team or Software Development within IS Apps. If issues arise that impact this area, our informed stakeholder representing IS Apps will be consulted, though this is not anticipated. The primary technique to gather the processes and requirements for such research will be through discovery workshops led by the Project Team with Subject Matter Experts at the start of the project. 

Out of scope

Support, guidance or assistance with non-IT aspects for the operation or maintenance of the Framework, such as: 

  • Governance, Ethics, and non-IT operational advice about the Framework Agreement. 
  • Legal aspects or non-IT comprehension of the Framework Agreement. 
  • Other non-IT elements of the Framework Agreement.  
  • Creation and management of an associated Data Asset Register, as referenced in MVM317. 
    • This register does not exist, and it is not the responsibility of IT to create or maintain such an asset. 
    • As part of operating the Framework Agreement, a list of “joint research activity” is created and maintained by the Edinburgh Research Office. This could be used as the basis for next steps consideration for such an asset register. 
  • Developing a logging system for keeping track of research progress. 
  • Monitoring progress for the research cycle. 
  • Developing online/digital Information Security questionnaire, as referenced in MVM317. 
  • Additional action following the gap analysis from MVM317. 
  • Registering or tracking use of Bring your Own Device for those involved in operating the Framework Agreement project/s. 

 

Objectives and Deliverables

Ref Objective/Deliverable Priority Success Criteria Owner
O1 Create a single point of digitised information to present relevant UoE IT guidance for use by all UoE stakeholders, involved in conducting agreed joint research projects, where the Framework applies.     Project Sponsor
D1.1 Create a SharePoint site that can be edited and maintained by relevant College of Medicine and Veterinary Medicine (CMVM) IS staff. Must Have   Technical Lead
D1.2 Technology Lead, to agree with CMVM IS Leads on the mechanism and agreed process/es for authoring and approving changes to the SharePoint site content. This should include who (from current CMVM IS staff) will be given permission to manage access to the SharePoint site and role-based permissions for initial authors. Must Have   Technical Lead
D1.3 Once SharePoint site framework/templates are developed and process/es are in place to author content, test access controls work as intended. Establish foundation process for reviewing the Framework Agreement at regular intervals. Must Have   Technical Lead
D1.4 Establish BAU analysis process for user feedback and site visits to be conducted at regular intervals to agreed Owners and Informed Area Experts identified. Should Have   Technical Lead
D1.5 Establish a user feedback loop for site visitors to share their experience with the resource tool and provide Owners with both positive and negative insight. Should Have   Technical Lead
O2 Re-assess the IT requirements in relation to the current Framework Agreement to ensure we are referring to current guidance, based on up-to-date NHS LHB policies, codes of practices and standards.     Project Sponsor 
D2.1 Obtain the latest version of NHS LHB policies, codes or practice and standards, as referenced in the Framework Agreement and compare it to previous versions. Document specific IT requirements and controls that must be adhered to which have changed, and compare against UoE recommended IT service, system and process controls. Must Have   Business Lead
O3 Conduct an information discovery exercise with the Framework subject matter experts, to create real user case examples for agreed joint research work, and to enhance knowledge for the project stakeholders.     Technical Lead
D3.1 With key project stakeholders and Framework subject matter experts - identify a small number of typical joint research projects examples for further review. Must Have   Technical Lead
D3.2 Using the examples, map out The Framework joint-research project process flow, and key decision points, where specific IT requirements may be needed. Document outcomes. Must Have   Project Team
D3.3 Using the examples, document which IT systems, services and processes were used at each decision point, and review outcomes of use, identifying any issues, challenges, or gaps that stakeholders encountered along the way. Must Have   Project Team
D3.4 Using documented outcomes from D3.1 and D3.2, assess if appropriate IT systems, services and/or processes were used to meet the current requirements of The Framework (O2). Document these where adjustments need to be made, to achieve or enable improved compliance. Must Have Dependent on the success of D3.1 and D3.2 Project Team
D3.5 Invite and collect feeback from SMEs on the architecture of the SharePoint site for both Version 1 and 2 prior to deployment.     Technical Lead
O4 Create a list of recommended UoE IT/IS services that can be used during operation of joint research project, operating under the Framework.     Business Lead
D4.1 Using the deliverables from O3, identify the tools and services that can be recommend for use. Must Have   Business Lead
D4.2 Using the deliverables from O3, identify the tools and services that cannot be recommend for use. Must Have   Business Lead
D4.3 Collate guidance on the best way to interact with and make use of UoE IT/IS services, any costs associated with use/on-going use and how to obtain support, should this be required. Should Have   Business Lead
D4.4 Create relevant IT guidance for use to populate the SharePoint site using outcomes from previous deliverables to create content on SharePoint site ready for review. Must Have Dependency in D3.1, D3.3, D3.4, and O1 Business Lead
D4.5 Link Service Level Definitions to IT/IS services in scope for use, where this is beneficial. Could Have If achieved would enhance the offerings in the resource to support research staff Business Lead
O5 Maintain clear and timely communication across Stakeholder Groups throughout the project lifecycle.     Project Sponsor
D5.1 Create a communication plan and schedule early in the project to identify users, communication type, frequency, and communication owner. Must Have

Clear and informed users who feel confident in the project goals and resource deployment.

Successful engagement from SMEs from O3

Project Team

 

Benefits

The University and NHS Lothian have a Framework Agreement (hence forth named ‘The Framework’) which the University currently meets in relation to the requirements from the NHS Board on data management. The agreements are between:  

  • NHS Lothian Health Board and the University Court   
  • NHS Digital and the University Court 

The College of Medicine and Veterinary Medicine (CMVM) works closely with the National Health Service (NHS) across many aspects of research and education. This includes access for university researchers to NHS facilities and patients; their data and samples as well as reciprocal access for NHS staff to university facilities, systems and expertise. Many research projects are jointly developed and delivered by University and NHS staff.  The NHS also supports university matriculated students in their clinical education and research projects.  A large number of UoE and NHS staff have Honorary contracts with the other organisation to facilitate these mutually beneficial activities.

Key Benefits realised from this project are: 

  • Mandatory compliance of the NHS Lothian Framework Agreement between NHS Lothian and the University Court.  
    • The deliverables will increase confidence and assurance for UoE colleagues participating in joint research work, where the Framework applies, that IT compliance and best practices can be achieved by following the guidance provided and that this will be maintained in future. 
  • College business and research strategy requires compliance with the Framework Agreement.
    • This project will benefit the researchers and staff in the UoE by creating a uniform approach with guidance on appropriate IT systems, services, and enhanced processes to use to help researchers comply with the IT requirements of The Framework. 

    • This should ease on-boarding for future joint research work, where the framework applies. 

  • UoE colleagues will have easy access to and wider visibility of appropriate IT systems, services and enhanced processes to use. They will have more transparency on costs for using these systems and services, which will help planning and budget forecasting and control.  

  • While the resource is designed and purpose-build for researchers in CMVM, the final product could be an exemplar for other Colleges/Schools for assisting their researchers in maintaining compliancy with similar frameworks. 

 

Success Criteria

The successful accomplishment and sign off of all 'Must Have' deliverables to the project with handover conducted prior to the closure of the project. 

 

Project Milestones

Stage Milestone Due Date Previous Date Complete  
Initiate Project Start Date (Major Milestone) 06-Jun-2024 No date available Yes

 view

Plan Project Brief completion (Major Milestone) 09-Jul-2024 28-Jun-2024 Yes

 view

Execute      Phase 1 Complete - Discovery 03-Sep-2024 No date available No

 view

Execute Phase 2 Complete - First SharePoint Version 01-Oct-2024 No date available No

 view

Execute Phase 3 Complete - Second SharePoint Version      22-Oct-2024       No date available      No

 view

Execute Phase 4 Complete - User Testing 01-Nov-2024 No date available No

 view

Deliver Delivery of Project Outcomes (Major Milestone) 18-Nov-2024 No date available No

 view

Deliver Handover and Documentation Sign-Off 25-Nov-2024 No date available No

 view

Close Project Closure Completed (Major Milestone) 06-Dec-2024 No date available No

 view

 

 

Project Info

Project
IT Implementation of the NHS Lothian Health Board Framework Agreement
Code
MVM319
Programme
MVM Research (MVMRES)
Management Office
ISG PMO
Project Manager
Alexandra Mezeul
Project Sponsor
Mark Hay
Current Stage
Execute
Status
In Progress
Project Classification
Run
Start Date
06-Jun-2024
Planning Date
09-Jul-2024
Delivery Date
08-Jan-2025
Close Date
31-Jan-2025
Programme Priority
1
Overall Priority
Normal
Category
Compliance

Documentation

Plan