The training modules are specific to a CMS DUA accessing data through the DAC Information Systems (IS). They are not applicable to a CMS DUA accessing data through the Virtual Research Data Center (VRDC).
To meet FISMA (Federal Information Security Management Act) and NIST (National Institute of Standards and Technology) security controls, the DAC is required to review and update all DAC security protocols and trainings annually. Additionally, the DAC is responsible for developing training materials, holding training sessions, and verifying that all DAC Users have satisfied the requirements set forth by CMS.
Throughout the life span of a DAC managed project all Project Team Members and Server Seat Holders are required to complete all of the Canvas training modules annually. Compliance requirements must be met before any new or renewal access will be approved for a User to access secure data housed on the DAC Information Systems.
Note: DAC training modules provide an overview of the DUA security controls, suppression requirements, and legal liability for compliance with the law. They should not be considered a replacement for a User’s responsibility to comply fully with all Privacy and Security requirements referenced in a CMS DUA.
Page Contents
2024 DAC Training Program Modules
Effective 1/31/2024
Security and Compliance Training Module
The DAC is responsible for tracking and documenting all DUA compliance for any project issued using data that is housed in the DAC Information System. This module completion is required annually.
User Agreement Form Module
Users are required to sign the form in which they attest to having read, understand, and agree to all DUA and DAC required policies, standards, and procedures. This module completion is required annually.
CITI Compliance Training Module
The DAC is responsible for ensuring that all DAC users engaging with the DAC Information Systems have completed the required Research Ethics and Compliance training course through the CITI Program. The user is required to maintain a current CITI Program Training Completion Certificate for Human Subjects Research (HSR). This module completion is required in the month a current certificate expires.