[R] security using R at work

[john matthew]

Hello Laurence.
Taking a pragmatic approach.

If the data is so valuable and secret but also needs some analysis in R,
here is suggested steps to minimise security risks.

1. Plan the analysis up front, what exactly what you want and the outcomes.
2. Take a laptop with Internet, install R and all packages needed for the
planned analysis.
3. Unplug ethernet and turn off blue tooth and wifi. So no internet access
at all.
4. Bring your secret data via USB or cd.
5. Perform the R analysis and export reports and figures etc to safe place.
6. Delete R, the data and all packages from laptop before using online
again.

A bit extreme and may still be some risk but its minimal as the analysis
was done offline, and you removed R etc after. But now have a set of R
results.

Just an idea.

John.


On 8 Aug 2018 16:53, "Laurence Clark" <Laurence.Clark using healthmanltd.com>
wrote:

> Hello all,
>
> I want to download R and use it for work purposes. I hope to use it to
> analyse very sensitive data from our clients.
>
> My question is:
>
> If I install R on my work network computer, will the data ever leave our
> network? I need to know if the data goes anywhere other than our network,
> because this could compromise it's security. Is there is any chance the
> data could go to a server owned by 'R' or anything else that's not
> immediately obvious, but constitutes the data leaving our network?
>
> Thank you
>
> Laurence
>
>
> ------------------------------------------------------------
> ------------------------------------------------------------
> ----------------------------------------------------------
> Laurence Clark
> Business Data Analyst
> Account Management
> Health Management Ltd
>
> Mobile:                 07584 556498
> Switchboard:    0845 504 1000
> Email:          Laurence.Clark using healthmanltd.com
> Web:            www.healthmanagement.co.uk
>
> ------------------------------------------------------------
> ------------------------------------------------------------
> ----------------------------------------------------------
> CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole
> use of the intended recipients and may contain confidential and privileged
> information or otherwise be protected by law. Any unauthorised review, use,
> disclosure or distribution is prohibited. If you are not the intended
> recipient, please contact the sender, and destroy all copies and the
> original message.<BR><BR>MAXIMUS People Services Limited is registered in
> England and Wales (registered number: 03752300); registered office: 202 -
> 206 Union Street, London, SE1 0LX, United Kingdom. The Centre for Health
> and Disability Assessments Ltd (registered number: 9072343) and Health
> Management Ltd (registered number: 4369949) are registered in England and
> Wales. The registered office for each is Ash House, The Broyle, Ringmer,
> East Sussex, BN8 5NN, United Kingdom. Remploy Limited is registered in
> England and Wales (registered number: 09457025); registered office: 18c
> Meridian East, Meridian Business Park, Leicester, Leicestershire, LE19 1WZ,
> United Kingdom.</font>
> ------------------------------------------------------------
> ------------------------------------------------------------
> ----------------------------------------------------------
>
>
> ------------------------------------------------------------
> ------------------------------------------------------------
> ----------------------------------------------------------
>
>
> ############################################################
> #########################
> Scanned by MailMarshal - M86 Security's comprehensive email content
> security solution.
> Download a free evaluation of MailMarshal at www.m86security.com
> ############################################################
> #########################
>
> ______________________________________________
> R-help using r-project.org mailing list -- To UNSUBSCRIBE and more, see
> https://stat.ethz.ch/mailman/listinfo/r-help
> PLEASE do read the posting guide http://www.R-project.org/
> posting-guide.html
> and provide commented, minimal, self-contained, reproducible code.
>

	[[alternative HTML version deleted]]