CDC Health Information Innovation Consortium May Forum Project Presentations: Emerging Infection Program Web Service  – Jason Hall and Research Electronic Data Capture – William Duck Brian Lee Chief Public Health Informatics Officer Office of Public Health Scientific Services Tuesday, May 12, 2015 10:00-11:00am EST Chamblee Building 106, Room 1A Centers for Disease Control and Prevention Office of Public Health Scientific Services

Instructions for Muting/Unmuting in Lync From Lync 2010: Mute and Unmute your Lync audio by clicking on the microphone icon in the Lync meeting window From Lync 2013: Before we begin, we do ask that everyone mutes their phones. This document shows you how to mute if you are connected through Lync 2010 and Lync 2013 and if you are dialed in, please press *6 to mute your phone.” If Dialed In: Press *6 to Mute or Unmute your microphone

Emerging Infectious Program (EIP) Web Service CHIIC Update May 12, 2015 Jason Hall – NCEZID, CDC Sreeni Kothagundu, Northrop Grumman – NCEZID, CDC National Center for Emerging and Zoonotic Infectious Diseases Emerging Infections Programs (EIP)

EIP Web Service Background Enhanced EIP Web Service EIP Web Service Architecture Next Steps

What is EIP? The Emerging Infections Programs (EIP) is a population-based network covering 15% of the population and consists of projects to improve patient outcomes through evaluation and improvement of emerging infection prevention and control methods. Over 40 projects and around 20 special studies A collaboration of CDC, state health departments, universities, hospitals, and other federal agencies. Over 500 publications

EIP IT Mix of information system types – study databases, case information management systems, site systems Systems used for projects can vary by site Multiple transport methods in use Project protocols can change yearly Adopted IT Strategy in 2012

Problem CDC-developed case management system Two installations – CDC and at each site Current process was cumbersome and open to errors Export to file from one system and upload to other

Existing alternatives SAMS PHINMS SFTP

Current EIP Web Service - Minimally extensible architecture - Designed as proof of concept - Supports only a single EIP Program Existing EIP Web Service release 1.5 - Adapt and transform PH information is and will be exchanged, expanding use of EHR data, utilizing other or novel sources - Improve and modernize current EIP technology Enhanced Web Service aligns with key strategic EIP IT goals: …accelerating the utilization of emerging tools and approaches to improve the interoperability, availability, quality and/or timeliness of surveillance data EIP IT Goals align with CDC surveillance strategy goal:

EIP Web Service v2.0 Is reusable by other C/I/O’s As CDC Shared Services, with appropriate resources to NCEZID for additional support personnel and expansion to more scalable server configurations Changed the framework and service to support a second EIP program Provides support for new data interfaces through Requires only configuration and minor development specific for new data

EIP Web Service – Data Flow Data transport protocol designed for use between state surveillance information systems and CDC State surveillance information systems invoke EIP Web Services (in CDC DMZ) to fulfill the application requests to transfer non-PII data to CDC EIP Web Services logs and stores received data in EIP Repository is shared with EIP CDC programs.

EIP Web Service Service Oriented Architecture Overview (every functionality is a service and can be shared)

EIP Web Service - System Architecture

Modular Approach Adopted SOA – Service Oriented Architecture Every function / feature is a service that can be hosted in the CDC DMZ All the services can be shared and reused with minimal effort EIP Services can be shared with other programs or other CIOs can hosted

Custom Security OCISO approved custom IP based security Machine to machine communication Communication using HTTPS only. (HTTPS ports only) Passwords are encrypted; no clear password text IP based security; IP extracted on the fly from SOAP requests Why not SAMS authentication? No API available for SAMS SAMS does not support SOAP SAMS Identity proofing is limited to humans/users, not for the machines

Multiple IP Support ITSO does not support implementing firewall rules at the application level All standard IPs are enabled by default Supports range of IP addresses from States Supports limited and logical firewall rules Unauthorized IPs blocked by EIP WS and requests logged without processing Supports both IPV4 and IPV6 addresses

Extensible EIP WS are SOAP-based services Expandable to RESTful services Easily extensible for two-way data communication between states and CDC Expandable to transfer data types XML, JSON, TEST, CSV, Excel and serializable binary data streams

Next Steps ATO received April 17 √ May - June 2015 Testing with partners July 2015 Replace existing EIP WS 2nd EIP project implemented January 2016 Available for other CDC Programs

Questions

An Introduction to REDCap (Research Electronic Data Capture) William M. Duck, MS, MPH CHIIC Presentation, May 12, 2015 NCEZID Informatics Group

Outline REDCap Story and Features REDCap Implementation Demonstration REDCap collaboration and support Proposed REDCap shared service model

REDCap Story Currently over 1,442 active institutional partners

REDCap Story 167,000 projects currently in production or development-build status 228,000 active users Free for use

What is REDCap? A secure, HIPAA-compliant, web-based application designed specifically to support data capture for research studies Research data collection forms and surveys Coordinate multi-site, collaborative studies through SAMS (Secure Access Management System) Diverse research applications

REDCap Features WYSIWYG instrument design tool Single event or multiple event (longitudinal) surveys Data export to common statistical packages Data import from Excel Role-based user rights management

REDCap Features Interactive audit trail Customizable reporting and analytics Electronic delivery of surveys to participants Field validation, branching logic, calculated fields Data access groups (DAGS) Reusable online question repository

REDCap Features Native mobile application for Android Devices

REDCap Implementation REDCap C&A completed late November 2014 SAMS integration Went live in early February for NCEZID

REDCap Demonstration Project page overview Creation of a new instrument via data dictionary and online designer User rights management Data export and analytics Audit trail Using the Ebola Readiness data project for demo purposes…

REDCap Collaboration and Support REDCap Consortium REDCap Google Groups REDCapCon REDCap Wiki REDCap Video Resources REDCap Weekly Developer Call

REDCap Proposed Shared Service Model What is the current demand? Administrative SOPs/engagement Pricing structure? Create REDCap advisory board? EOC/public health response The REDCap consortium now has members in 90 countries, including many low and middle income countries, and many where CDC has program activities.  As we develop global health activities in an increasingly cooperative approach, the ability for  partner institutions to have secure data management systems is an enabler to establish good practice in data governance. Mature data governance policies and practices are on the critical path in establishing data sharing agreements between institutions for research and public health use of these data.  

Thank you & Questions For more information please contact Centers for Disease Control and Prevention 1600 Clifton Road NE, Atlanta, GA 30333 Telephone: 1-800-CDC-INFO (232-4636)/TTY: 1-888-232-6348 Visit: www.cdc.gov | Contact CDC at: 1-800-CDC-INFO or www.cdc.gov/info The findings and conclusions in this report are those of the authors and do not necessarily represent the official position of the Centers for Disease Control and Prevention. Centers for Disease Control and Prevention Office of Public Health Scientific Services

Items of interest OPHSS-OD Public Health Advisor Position – May 13 [link] National Civic Day of Hacking – June 6 – @ThoughtWorks, Atlanta [link] Coursera / Johns Hopkins Statistical Reasoning for Public Health 1: Estimation, Inference & Interpretation – June 1 – July 25 [link] Coursera / Johns Hopkins Statistical Reasoning for Public Health 2: Regression Methods– August 31 – October 24 [link] SciComp Training – Cluster Computing, Linux, Git – every month @Roybal [link] US Digital Services Playbook [link]