A maturity model framework for federated networks of trusted research environments

A Trusted Research Environment (TRE) is a highly secure computer system where sensitive data is stored that researchers can access remotely and make use of in a safe setting. TREs can form federated networks when they have overlapping objectives, such as providing data access to the same researchers for the same project. However, there is variation in the design and implementation of TREs. This makes it difficult for these systems to interoperate without guidance on the technical pathway that should be followed to achieve federation maturity, and resources to assess the current state of maturity.

We evaluated international maturity models for measuring the capabilities of life sciences and healthcare federated digital infrastructures to identify essential components for federation. Merging synonymous and related components resulted in a maturity model framework consisting of six discreet domains that are required for optimal TRE federation.

The framework comprises of one governance structure domain (governance and policies), one service delivery domain (operations and performance), three technical domains (data management and security, operational infrastructure, clinical/research infrastructure) and one engagement strategy domain (outreach and communication). The TRE community in the UK, convened by DARE UK, have developed a technical blueprint for deploying standalone TREs (called SATRE) and a technical Federated Architecture Blueprint (FAB) for enabling federation between TREs. These blueprints align with many of the maturity model framework's domains.

We suggest criteria for implementing the maturity model framework domains and for assessing their relative levels of maturity, and where appropriate reference the recommendations from SATRE and FAB. The maturity model framework can be used as a foundation for assessing the governance, operational and technical readiness of TREs when joining federated networks.