Capability Map - What an organisation needs to run a TRE safely 5 Pillar Capabilities 1) Information governance - What the organisation does to ensure information risk is measured and managed to an acceptable level. 2) Computing technology - What the organisation does to manage systems for storing, processing, retrieving, and sending information. 3) Data Management - What the TRE organisation does to manage data assets and ensure information remains secure. 4) Supporting Capabilities – These organisational abilities are likely to be shared across the wider enterprise and unlikely to relate solely to a TRE. For example, procurement is likely to be part of a finance function and while the TRE organisation may stress the need to secure supply chains as part of procurement it is unlikely there would be a need to create parallel procurement processes for the TRE. 5) Federation Extension - What the federation does to govern, coordinate and operate a federation of TREs that work together to support research across multiple organisations.