Data protection issues when using SAS-Viya

[Anita_n]

Dear all,

my  company is deciding on switching from SAS 9.4 to SAS-Viya.  However, our concern is the data protection aspects, as we work with patient data, Uploading data to CAS will be no option for us . Are there any solutions to this problem?

I will be glad about any tip.

[Tom]

Run CAS in a private cloud.

[Madelyn_SAS]

Since it sounds like you already have SAS9, I would suggest that it would be best to contact your account representative to discuss your requirements and concerns. 

[Anita_n]

Okay, thanks for the hints

[SASKiwi]

In my experience when new software is being implemented a security assessment is done by an organisation's Information Security specialists - that's what happens where I work. This covers all aspects of software security, not just data protection. BTW, on-prem is also an option with SAS Viya. This provides an even higher level of security.  

[LinusH]

"Uploading data to CAS will be no option for us"

Why?

What are the specific security/privacy requirements?

You usually do an assessment, explore risks, and design accordingly, including mitigating activities for the highest risks.

[acordes]

You have to go into deeper talks with the SAS key account for your company. 

If your concerns were not addressed properly by the SAS Viya architecture, it would be an epic fault. 

We  have sensible customer data as well, but together with the legal department we found an easy and out-of-the box solution that suited our legal needs for privacy. 

[Anita_n]

Thankyou all for your suggestions, I will talk to my boss and contact the SAS key account of my company for more details.

I  need to make a plan on how to go about this before contacting a SAS key account and also make preparation towards possible questions we will have to ask (tring not to forget any important aspect) that was my reason for posting this issue here. 

I appreciate all your answers, thanks