June 2025 Edition of Ask the Assessor: Security Protection Assets
Bridging the Gap: Developing a Regulated Research Implementation Guide | Training Topic
Sustainable Documentation: Debrief of CPPC'25 Full Day Workshop | Training Topic
At the CPPC 2025 Workshop (Avoiding Shelfware: Building Sustainable Research Compliance Documentation), ~50 community peers of research security and compliance professionals gathered for a full-day, in-person session focused on improving the sustainability and coordination of research documentation efforts. Five working groups each focused on a distinct, persistent challenge, developing shared language, peer strategies, and practical recommendations for the community.
This webinar will provide a summary of insights and proposed solutions emerging from day and these selected common challenge areas:
Compliance is not integrated into daily work
“Not my job” — role confusion and resource gaps
Cultural barriers to sustainable documentation
Compliance comes last
Program-level consistency and accountability
Each challenge team will briefly present the core issues they explored and what promising ideas or practices emerged from the workshop.
[Report long-term webpage | Feedback | Presentation | Recording ]
For full descriptions, download meeting notes, and recordings
Institutional Showcase | Community relationships and collaboration opportunities; Establish Community Inventory; Surface Community Needs; Help emerging centers through CoP and discover mentoring opportunities
Lessons Learned - NC State’s Journey to CMMC Level 2 Compliance [Recording] | Q&A + Office Hours Transcript | Jun. '25
Research Security Offices: Structure, Organization and Operation [Recording] | Apr. '25
Tackling NIST 800-171 HPC Challenges: Insight and Lessons Learned [Recording] | Feb. '25
Do you know your campus government relations team? [Recording] | Nov. '24
Assessment Experiences [Recording] | May '24
NC State Regulated Research Responsibility Ownership [Recording] | Mar. '24
Certifying HiPerGator for Protected Health Information [Recording] | Dec. '23
Debrief of first-ever - CMMC Learning Assessment [Recording] | Nov. '23
CU Boulder CMMC Gap Analysis Lessons Learned [Recording] | Oct. '23
Climbing the NISTy Mountains: A travelers guide [Recording] | Aug. '23
Panel on GRC Tools [Recording] | Apr. '23
Financials & Cost Model [Recording] | Feb. '22
NIST 800-171 Compliance Journey [Recording] | Sep. '22
Impact of Cybersecurity on UCF Research Administration [Recording] and The UChicago Security Research Data Strategy and Secure Data Enclave [Recording] | Nov. '22
System Security Plan Innovators [Recording] | Mar. '22
Researcher Focused Session | Strengthen relationships with impacted domain researcher; Gather feedback on their interests from the community; Develop collaboration opportunities
Facilitating Research: Intersections with Security at UCSD [Recording] | Sep. '23
Compliance & Researchers: Teamwork makes the dream work [Recording] | May '22
Training Topic | Establishing Community Inventory; Develop Community Skills; Address Gaps Missing at the Institutional Level
What’s In or Out? Compliance Check-In [Recording] | May '25
Flipping the Script on CMMC with ARFL Digital Research | recording by request: info@regulatedresearch.org | Mar. '25
C3PAO Perspective on Sponsorship and Governance [Recording] | Jan. '25
CISA Resources [Recording] | Oct. '24
Navigating Clinical Research Operations and Compliance [Recording] | Jul. '24
Debrief of "A Day with the CMMC Assessors" workshop [Recording] | Jun. '24
What you really need to know about HIPAA [Recording] | Apr. '24
CMMC 2.0 Rulemaking by Jacob Horne [Recording] | Feb. '24
The Path to CMMC Assessment [Recording] | Feb. '23
ChatGPT for CMMC Compliance [Recording] | Mar. '23
System Security Plan Workshop Deliverables [Recording] | May '23
NIST SP 800-171 R3 [Recording] | Jun. '23
Preparing and Engaging with Third-Party Assessors [Recording] | Aug. '22
Making FAQs & Documentation More User-Friendly [Recording] | Apr. ' 22
Convenience vs Security & Debrief from Certified CMMC Professional course [Recording] | Oct. '22
Tales from the IT Policy Office at the University of California [Recording] | Dec. '22
Strategic Partnership | Dedicated time to the partners to hear from the community
Trusted CI & RRCoP: The Next Five Years [Recording]| Dec. '24
EDUCAUSE Policy Review [Recording] | Sep. '24
Voices from Aligned Communities [Recording] | Jun. '22
NIST guidance document for implementing controls on HPC systems [Recording] | Jan. '23
Department of the Navy Blue Cyber Education Series for Small Businesses and Academic/Research Institutions [Recording] | Jul. 23
Biomedical Programs & HITRUST [Recording] | Jul. '22
All Hands Meeting | Addressing updates from Academic and Industry
RRCoP Planning and All Hands [Recording] | Jan. '24
Overview of RRCoP and Planning [Recording] | Jan. '22
Assessment | Confirming that RRCoP provides value; Planning for future needs
RRCoP Then & Now [Recording] | Aug. '24
July 9 @ 2 pm EST / 11 am PST | Sustainable Documentation: Debrief of CPPC'25 Full Day Workshop | Training Topic
August 13 @ 2 pm EST / 11 am PST | Community perspectives idea & Framework integration
September 10 @ 2 pm EST / 11 am PST | Endpoint Management
October 8 @ 2 pm EST / 11 am PST
November 12 @ 2 pm EST / 11 am PST
December 10 @ 2 pm EST / 11 am PST
2026
January 14 @ 2 pm EST / 11 am PST
February 11 @ 2 pm EST / 11 am PST
March 11 @ 2 pm EST / 11 am PST
April 8 @ 2 pm EST / 11 am PST
May 13 @ 2 pm EST / 11 am PST
June 10 @ 2 pm EST / 11 am PST
July 8 @ 2 pm EST / 11 am PST
August 12 @ 2 pm EST / 11 am PST
September 9 @ 2 pm EST / 11 am PST
October 14 @ 2 pm EST / 11 am PST
November 12 @ 2 pm EST / 11 am PST
December 9 @ 2 pm EST / 11 am PST
2027
January 13 @ 2 pm EST / 11 am PST
February 10 @ 2 pm EST / 11 am PST
March 10 @ 2 pm EST / 11 am PST
April 14 @ 2 pm EST / 11 am PST
May 12 @ 2 pm EST / 11 am PST
June 9 @ 2 pm EST / 11 am PST
July 14 @ 2 pm EST / 11 am PST
August 11 @ 2 pm EST / 11 am PST
September 8 @ 2 pm EST / 11 am PST
October 13 @ 2 pm EST / 11 am PST
November 10 @ 2 pm EST / 11 am PST
December 8 @ 2 pm EST / 11 am PST
2028
January 12 @ 2 pm EST / 11 am PST
February 9 @ 2 pm EST / 11 am PST
March 8 @ 2 pm EST / 11 am PST
April 12 @ 2 pm EST / 11 am PST
May 10 @ 2 pm EST / 11 am PST
June 14 @ 2 pm EST / 11 am PST
July 12 @ 2 pm EST / 11 am PST
August 9 @ 2 pm EST / 11 am PST
September 13 @ 2 pm EST / 11 am PST
October 11 @ 2 pm EST / 11 am PST
November 8 @ 2 pm EST / 11 am PST
December @ 2 pm EST / 11 am PST
2029
January 10 @ 2 pm EST / 11 am PST
February 14 @ 2 pm EST / 11 am PST
March 14 @ 2 pm EST / 11 am PST
April 11 @ 2 pm EST / 11 am PST
May 9 @ 2 pm EST / 11 am PST
June 13 @ 2 pm EST / 11 am PST
July 11 @ 2 pm EST / 11 am PST
August 8 @ 2 pm EST / 11 am PST
September 12 @ 2 pm EST / 11 am PST
October 10 @ 2 pm EST / 11 am PST
Over the period between 2022–2024, RRCoP is committed to delivering sessions with different areas of focus. Below is the categories, total number of sessions, and a brief description of the content delivered at these meetings.
All Hands Meeting — 6x Addressing updates from Academic and Industry
Established Institutional Showcase — 5x Community relationships and collaboration opportunities; Establish Community Inventory; Surface Community Needs
Institutional Showcase — 4x Help emerging centers through CoP and discover mentoring opportunities
Researcher Focused Session — 3x Strengthen relationships with impacted domain researcher; Gather feedback on their interests from the community; Develop collaboration opportunities
Training Topic — 9x Establishing Community Inventory; Develop Community Skills; Address gaps missing at institutional level
Assessment Baseline & Planning — 3x Confirming that RRCoP provide value; Planning for future needs
Strategic Partnership — 6x Dedicated time to the partners to hear from the community