Overview

Background

The University of Edinburgh Health and Safety team use a system called Cardinus to manage certain workplace risk across the organisation. 

The Cardinus Risk Management system is a SaaS Cloud hosted solution. The primary use of the system is for managing ergonomic Display Screen Equipment (DSE) assessments across the University, although there are some other ergonomic risks  assessments such as laboratory managed through Cardinus.   

The project will develop a technical solution to authenticate UoE staff and visitors to use the Cardinus Risk Management system. In essence, the solution will enable new members of the organisation access to the Cardinus Risk Management system automatically without the need for manual intervention or data entry by local administrative teams.  

Scope

In scope: 

• Integration of the Cardinus system within UoE incorporating 
  • Authentication to the Cardinus system through SSO 
  • All current staff and visitors will be automatically maintained with the Cardinus system on a daily basis
• As there is personal data being utilised, there will be the requirement to 
  • Complete a Data Protection Impact Assessment (DPIA)
  • Confirm use of the specified data from the Golden Copy owners 

Out of scope:

• The upgrade to the latest version of Cardinus, as this will be completed as a pre-requisite prior to this project
• The integration of the Cardinus system will not cater for either Post Graduate Students or Undergraduate Students 

Objectives

Priority – M = Must Have; S = Should Have; C = Could Have; W = Want 

• M = has to be satisfied for the final solution to be acceptable in terms of delivery dates, compliance, viability etc. 

• S = high-priority requirement that should be included if possible -workarounds may be available 

• C = a nice-to-have requirement 

• W = want but will not be part of this project 

• O = Objective 

• D = Deliverable

Benefits

• All UoE staff and visitors will automatically be granted access to the Cardinus Risk Management system once their credentials have been completed in the appropriate down stream systems 
• Local administrative staff will no longer be required to manually grant individuals access to new visitors or UoE employees to the system
• Opportunity to improve overall compliance rate of as administrative time could be used to audit and monitor completion

Success Criteria

• A Fully completed and authorised Data Protection Impact Assessment (DPIA)
• The automatic transfer of user configuration data to the Cardinus system 
• User authentication with SSO

Project Milestones