Overview

The Secure Compute Research Environment (SCRE) is a private, secure virtual environment that allows researchers to remotely analyze sensitive or restricted data, produce research results, and export approved outputs.

SCRE provides a campus-supported alternative to building individual secure research workstations for each project. It is designed to help researchers meet common restricted data provider requirements, reduce security and implementation burden, and support secure collaboration across research teams.

Who Should Use SCRE?

SCRE may be appropriate for researchers who need to work with restricted or sensitive datasets that require a secure computing environment, such as data providers that require:

  • Secure access controls
  • Strong authentication
  • Restricted internet or device access
  • Disabled printing or removable media
  • Antivirus and system security protections
  • Documented security plans or system controls

The environment is documented in a System Security Plan that has been pre-approved by the UCSB CISO for selected agency and restricted data provider use. Researchers may be able to include this documentation in applications for restricted dataset licenses.

Key Features

SCRE includes:

  • A dedicated Windows virtual desktop for each research project
  • Secure storage for restricted datasets, interim results, and temporary application files
  • Multi-factor authentication for secure login
  • Browser-based access from an internet-connected device
  • Pre-loaded research and productivity software, including Microsoft Office, Adobe Acrobat Pro, Mathematica, R/RStudio, SPSS, SAS, and Notepad++
  • Access to pooled licenses for selected applications, including Matlab, Stata SE, and ArcGIS Pro
  • Ability to install additional project-specific software when needed

The user experience is similar to using a traditional remote desktop, with additional security controls in place.

Data Transfer and Export Restrictions

SCRE is designed to protect restricted data, so data movement in and out of the environment is controlled.

Initial dataset uploads are performed by the SCRE Operator when the virtual desktop is created. Researchers can use the File Transfer Gateway to securely upload files, share files with approved colleagues, and export files when permitted.

Exports outside of SCRE are only allowed when explicitly permitted by the restricted data provider and require a secondary approval process.

Request Access

Submit a SCRE request form to request a new environment, usually completed within one week

Resources and Support

Existing SCRE users should first review the following support resources for additional information, and contact local or departmental IT support staff for assistance:

Departmental IT support staff can escalate technical questions to scre-support@ets.ucsb.edu.