Skip to content

CREATE TRE User Handbook

CREATE TRE User Information

The Trusted Research Environment (TRE) relies on all users contributing to the security, integrity, and effective operation of the platform. Maintaining a secure environment is a shared responsibility, and every user has a role to play in protecting sensitive data, following established processes, and ensuring compliance with organisational and regulatory requirements.

The information below outlines the mandatory training requirements and key responsibilities that apply to all users working within the TRE.

Mandatory Training

All users are required to maintain compliance with mandatory training requirements.

  • Users requiring access to the Trusted Research Environment (TRE) must complete the NHS e-Learning for Healthcare (e-LfH) Data Security Awareness training before access can be granted. The certification is valid for 12 months and must be renewed annually. Users will receive reminders when retraining is required.
  • Users requiring egress authority must also complete the Office for National Statistics Safe Researcher Training before being given egress authority. This training lasts for three years if only the training is completed, and five years if a user registers with the ONS Safe Researcher service. Users will receive reminders when retraining is required.

User Responsibilities Within the TRE

All users working within the TRE are responsible for maintaining compliance with operational, security, and governance requirements. This includes:

  • Following the Incident Response Process when becoming aware of, identifying, or reporting a security, operational, or data-related incident.
  • Maintaining compliance with all mandatory training requirements and completing refresher training within the required timescales.
  • Abiding by the Terms of Use.

Adherence to these responsibilities helps ensure the security, integrity, and effective operation of the TRE, while supporting compliance with applicable governance and information security requirements.

Change Management

If you need to make a change to a project workspace, complete the following steps:

  1. Go to the ARC support portal.
  2. On the left-hand side of the page, open the Assistance drop-down menu.
  3. Select Changes.
  4. Select Add from the top banner to create a ticket outlining the change request.

Data Destruction and Disposal

If you wish to have your data disposed of when your project reaches its conclusion, complete the following steps:

  1. Go to the ARC support portal.
  2. On the left-hand side of the page, open the Assistance drop-down menu.
  3. Select Create a Ticket.
  4. Submit a ticket requesting that the data be destroyed.

A PDF confirmation of deletion can be provided upon request.

Terms of Use

The CREATE Terms of Use apply to all users of the TRE. They set out the requirements for responsible use, incident reporting, data ownership, and use of the service.

Risk Awareness

Read Risk Awareness of Non-Standard TRE Configurations for the risks and mitigations associated with temporary internet access, external libraries, and shared project storage. These configurations require justification and review by the TRE team.

Document owner ResOps
Review signoff TRE/IG/ResOps Lead
Review frequency Annual
Last review date 27/10/26
Reviewed build Pending commit