There are multiple layers protecting the security of the NW Tribal Data Hub and protecting that security is a shared responsibility between the cloud provider, NWTEC, Tribes, and individual users. These layers can be broken down into physical security, cloud architecture, identity and access management, data management, monitoring, and disaster recovery. 

Physical Security 

This layer of security is about protecting the health and security of the physical infrastructure (i.e., physical hardware such as the servers) that house the data and services that comprise the NW Tribal Data Hub. These physical protections are the responsibility of the cloud provider, Amazon Web Services (AWS). 

These protections include: 

• Perimeter protections (fencing, barriers, security guards, etc.); 

• Security surveillance and monitoring for both interior and exterior areas of the data center, with real-time alerts and CCTV recording of activity; 

• Intrusion detection and security alerts; 

• Restricted access with multiple layers of security controls, including biometric authentication; 

• Environmental controls to monitor and control temperature, humidity, and other environmental health factors; 

• Automated fire detection and suppression, and; 

• Security updates and maintenance of the physical servers. 

Cloud Architecture 

Cloud architecture refers to the overall design of how the system is built in the cloud. This is like a blueprint for the NW Tribal Data Hub. It defines how the rooms (services, such as our data visualization tool QuickSight), hallways (networks), locks (security controls), and utilities (storage and computing) are arranged so the whole system is safe, reliable, cost-efficient, and easy to use.  

These protections include: 

• Network firewalls and security protocols; 

• Continuous, centralized logging and monitoring; 

• Strict access controls and centralized identity and access management; 

• Data protection and encryption algorithms validated by National Institute of Standards and Technology (NIST); 

• Access to the database or data storage is strictly controlled and restricted to within our Virtual Private Cloud (VPC); 

• FedRAMP and HIPAA-compliant services and architecture; 

• Automated backups and disaster recovery. 

This multi-layered design protects the privacy, security, and availability of the NW Tribal Data Hub. Identity and Access Management 

Identity and Access Management refers to the management of users and their privileges within a system. The NW Tribal Data Hub uses centralized identity and access management for both NWTEC staff and Tribal users of the NW Tribal Data Hub with Single Sign-On (SSO) enabled. This simplifies the task of user and permissions management, provides a better user experience, and enables additional layers of security. 

These protections include: 

• Enforced session time-outs help us protect against unauthorized access because someone forgot to sign out of their account on a shared device. 

• Multifactor authentication and/or one-time passwords are required for all users – this adds an extra layer of authentication and protects against unauthorized use of credentials to gain access to the system. 

• All users are federated through configured identity providers with enforced MFA (see above). Only after an identity is authenticated through the identity provider (for example, Microsoft Entra ID) is access granted to the system. 

• There are no passwords stored within AWS. 

• Role-based security groups follow the principle of least privilege – each user has access only to the resources and actions required for their role. 

• Row-level security groups protect Tribal-Area data at the row level by restricting access to only the individuals specified by the Tribe. 

• No one except NWTEC staff and individuals specified by the Tribe can access Tribal-Area data. 

• Tribes cannot view another Tribe’s area-specific data. 

Data Management 

The NW Tribal Data Hub has defined multiple data management policies and protocols to protect data throughout the data lifecycle. 

These protections include: 

• Data in the cloud are encrypted using secure industry-standard AES-256 encryption algorithms both at rest (i.e., in the database) and while in transit (i.e., when data are uploaded to cloud storage). Encryption keys are securely stored, strongly protected, and automatically rotated regularly. 

• Data are uploaded to the cloud from secure, encrypted connections. 

• Data are stored in a Virtual Private Cloud with no public access. 

• Access to data is restricted and strictly controlled. 

• The privacy of individuals is protected by presenting only de-identified and aggregated (grouped) data in data visualizations to prevent individuals from being identified. 

• Small number standards are followed. Statistical analyses based on a small number of cases will not be released to ensure individuals’ confidentiality and statistical reliability. See the NW Tribal Data Hub Methods for additional details on small numbers suppression. 

Artificial Intelligence (AI) Restrictions 

NPAIHB has a strict policy prohibiting the use of generative AI to protect Tribal data sovereignty. While many companies and cloud providers such as AWS continue to push new AI features, the NW Tribal Data Hub has explicitly disabled the use of any of these features at the account, security group, and user level. We continuously monitor new features and adjust our security policies as needed to keep the NW Tribal Data Hub protected. 

Users may occasionally see messages about AI features in the QuickSight data visualization tool. These messages may pop-up but can be ignored because the AI features have been disabled. At no point in time does any generative AI model have visibility or access to any Tribal data through the NW Tribal Data Hub. 

Centralized Auditing, Logging, and Monitoring 

The NW Tribal Data Hub has a continuous log of all network traffic and user access and activities within the NW Tribal Data Hub. These logs are stored in a centralized, isolated, and immutable environment with restricted access.  

Automated alerts inform our IT team immediately if suspicious activity, security issues, or issues with the health of the environment are detected.  

Disaster Recovery 

Disaster recovery refers to the ability to restore access and functionality to the system in the event of a disaster, whether this is a natural event (such as a fire), human error (such as deleting infrastructure by accident), or a technical failure (such as a health issue with a compute instance).  

The secure NPAIHB server contains raw backups of data files. 

These files are backed up: 

• Locally: 

• Twice a day 

• To an external on-site storage nightly  

• To a secured off-site storage location weekly  

• In the cloud: 

• Uploaded files are archived and retained in encrypted, secured storage for recovery purposes.  

• Automated backups of the database are created multiple times a day. These backups are encrypted with protected keys that are automatically rotated.  

• The database and other services are deployed in multiple availability zones, allowing for automated failover if a disaster were to impact one region.  

• Automated scaling of multiple services allows the NW Tribal Data Hub to dynamically adjust to the needs of users. 

For more information about how NWTEC manages and stewards data, see the NWTEC Data Governance Handbook.