Monthly Webinars

UCF's Approach to CMMC Level 1: with the processes & tools that also support CMMC Level 2 | Institutional Showcase

Presented By: Tammie McClellan, University of Central Florida

CMMC Level 1 may only require a subset of the controls found in Level 2, but institutions still face important decisions about processes, documentation, governance, and technical implementation. In this session, the University of Central Florida shares how it approached CMMC Level 1 as a campus capability rather than a one-time compliance exercise, intentionally selecting processes and tools that also support future CMMC Level 2 requirements. Whether your institution is preparing for its first Level 1 assessment or thinking longer-term, this session offers practical ideas for building once and maturing over time.

[Presentation | Recording]

RRCoP Webinars are put together by the community for the community we serve. 

Webinar Leads Team:

• Damon Armour, North Carolina State University

• Hauke Bahr, Indiana University

• Aaron Collie, Princeton University

• Louis Daher,  Michigan University

• Erik Deumens, University of Florida

• Carolyn Ellis, Arizona State University

• April Patterson Kankonde, Maryland University

• Barbara Schnell, Colorado University | Boulder

NEW: August 2026 - We are looking for additional members to help us please 📩 Contact us at info@regulatedresearch.org

For full descriptions, download meeting notes, and recordings 

Institutional Showcase | Community relationships and collaboration opportunities; Establish Community Inventory; Surface Community Needs; Help emerging centers through CoP and discover mentoring opportunities 

1. UCF's Approach to CMMC Level 1: with the processes & tools that also support CMMC Level 2 [recording] Aug. '26

2. Dynamic Documentation: Wiki, Document as Code, and Scripted SSPs [Recording] May '26

3. From Learning Assessment to the Real Deal - How UCSD Approached the CMMC L2 Assessment [Recording] | Feb. '26

4. AI In Regulated Research: Practical Uses + Cybersecurity Considerations | [Recording] | Jan. '26 

5. Cracking into Culture: Infusing Cybersecurity into the Culture of our Research Enterprise at GTRI [Recording] | Nov. '25

6. Transforming Endpoints into Beginning Points [Recording] | Sept. '25

7. Lessons Learned - NC State’s Journey to CMMC Level 2 Compliance [Recording] | Q&A + Office Hours Transcript | Jun. '25

8. Research Security Offices: Structure, Organization and Operation [Recording] | Apr. '25

9. Tackling NIST 800-171 HPC Challenges: Insight and Lessons Learned  [Recording] | Feb. '25

10. Do you know your campus government relations team? [Recording] | Nov. '24

11. Assessment Experiences [Recording] | May '24

12. NC State Regulated Research Responsibility Ownership [Recording] | Mar. '24

13. Certifying HiPerGator for Protected Health Information [Recording] | Dec. '23

14. Debrief of first-ever - CMMC Learning Assessment [Recording] | Nov. '23

15. CU Boulder CMMC Gap Analysis  Lessons Learned [Recording] | Oct. '23

16. Climbing the NISTy Mountains: A travelers guide [Recording] | Aug. '23

17. Panel on GRC Tools [Recording] | Apr. '23

18. Financials & Cost Model [Recording] | Feb. '22

19. NIST 800-171 Compliance Journey [Recording] | Sep. '22

20. Impact of Cybersecurity on UCF Research Administration [Recording] and The UChicago Security Research Data Strategy and Secure Data Enclave [Recording]  | Nov. '22

21. System Security Plan Innovators [Recording] | Mar. '22

Researcher Focused Session | Strengthen relationships with impacted domain researcher; Gather feedback on their interests from the community; Develop collaboration opportunities

1. Facilitating Research: Intersections with Security at UCSD [Recording] | Sep. '23

2. Compliance & Researchers: Teamwork makes the dream work [Recording] | May '22

Training Topic | Establishing Community Inventory; Develop Community Skills; Address Gaps Missing at the Institutional Level

1. Research Security as an Institutional Practice & Culture: Workshop Debrief [Recording] | July '26

2. Strengthening Research Security: Introducing NSF’s SECURE Center & SECURE Analytics [Recording] | June '26

3. A journey of developing Security Guidance for High-Performance Computing (HPC) [Recording] | April '26

4.  Enhancing Institutional Cybersecurity Through 14 Controls [Recording] | March '26

5. Sustainable Documentation: Debrief of CPPC'25 Full Day Workshop [Recording] | July '25

6. What’s In or Out? Compliance Check-In [Recording] | May '25

7. Flipping the Script on CMMC with ARFL Digital Research | recording by request: info@regulatedresearch.org | Mar. '25

8. C3PAO Perspective on Sponsorship and Governance  [Recording] | Jan. '25

9. CISA Resources [Recording] | Oct. '24

10. Navigating Clinical Research Operations and Compliance [Recording] | Jul. '24

11. Debrief of "A Day with the CMMC Assessors" workshop [Recording] | Jun. '24

12. What you really need to know about HIPAA [Recording] | Apr. '24

13. CMMC 2.0 Rulemaking by Jacob Horne [Recording] | Feb. '24

14. The Path to CMMC Assessment [Recording] | Feb. '23

15. ChatGPT for CMMC Compliance [Recording] | Mar. '23

16. System Security Plan Workshop Deliverables [Recording] | May '23

17. NIST SP 800-171 R3 [Recording] | Jun. '23

18. Preparing and Engaging with Third-Party Assessors [Recording] | Aug. '22

19. Making FAQs & Documentation More User-Friendly [Recording] | Apr. ' 22

20. Convenience vs Security & Debrief from Certified CMMC Professional course [Recording] | Oct. '22

21. Tales from the IT Policy Office at the University of California [Recording] | Dec. '22

Strategic Partnership | Dedicated time to the partners to hear from the community

1. Ask the Assessor LIVE + RRCoP Resource Roundup [Recording] | Dec. '25

2. Bridging the Gap: Developing a Regulated Research Implementation Guide [Recording] | Aug. '25

3. Trusted CI & RRCoP: The Next Five Years  [Recording]| Dec. '24

4. EDUCAUSE Policy Review [Recording] | Sep. '24

5. Voices from Aligned Communities [Recording] | Jun. '22

6.  NIST guidance document for implementing controls on HPC systems [Recording] | Jan. '23

7. Department of the Navy Blue Cyber Education Series for Small Businesses and Academic/Research Institutions [Recording] | Jul. 23

8. Biomedical Programs & HITRUST [Recording] | Jul. '22

All Hands Meeting | Addressing updates from Academic and Industry

1. RRCoP Planning and All Hands [Recording] | Jan. '24

2. RRCoP Then & Now  [Recording] | Aug. '24

3. Overview of RRCoP and Planning [Recording] | Jan. '22

2026 

• • September 9 @ 2 pm EST / 11 am PST

  • October 14 @ 2 pm EST / 11 am PST

  • November 12 @ 2 pm EST / 11 am PST

  • December 9 @ 2 pm EST / 11 am PST

2027

• • January 13 @ 2 pm EST / 11 am PST

  • February 10 @ 2 pm EST / 11 am PST

  • March 10 @ 2 pm EST / 11 am PST

  • April 14 @ 2 pm EST / 11 am PST

  • May 12 @ 2 pm EST / 11 am PST

  • June 9 @ 2 pm EST / 11 am PST

  • July 14 @ 2 pm EST / 11 am PST

  • August 11 @ 2 pm EST / 11 am PST

  • September 8 @ 2 pm EST / 11 am PST

  • October 13 @ 2 pm EST / 11 am PST

  • November 10 @ 2 pm EST / 11 am PST

  • December 8 @ 2 pm EST / 11 am PST

2028

• • January 12 @ 2 pm EST / 11 am PST

  • February 9 @ 2 pm EST / 11 am PST

  • March 8 @ 2 pm EST / 11 am PST

  • April 12 @ 2 pm EST / 11 am PST

  • May 10 @ 2 pm EST / 11 am PST

  • June 14 @ 2 pm EST / 11 am PST

  • July 12 @ 2 pm EST / 11 am PST

  • August 9 @ 2 pm EST / 11 am PST

  • September 13 @ 2 pm EST / 11 am PST

  • October 11 @ 2 pm EST / 11 am PST

  • November 8 @ 2 pm EST / 11 am PST

  • December @ 2 pm EST / 11 am PST

2029

• • January 10 @ 2 pm EST / 11 am PST

  • February 14 @ 2 pm EST / 11 am PST

  • March 14 @ 2 pm EST / 11 am PST

  • April 11 @ 2 pm EST / 11 am PST

  • May 9 @ 2 pm EST / 11 am PST

  • June 13 @ 2 pm EST / 11 am PST

  • July 11 @ 2 pm EST / 11 am PST

  • August 8 @ 2 pm EST / 11 am PST

  • September 12 @ 2 pm EST / 11 am PST

  • October 10 @ 2 pm EST / 11 am PST