Presented By: Cyd Burrows-Schilling, UC, San Diego

Wednesday, September 13, 2023  Researcher Focused

Cyd Burrows-Schilling of UC San Diego will share a few tricks to facilitating research, handling intake interviews, and the campus Cybersecurity Certification for Research program assessments.  [ Presentation + Q&A | Meeting Recording]

Presented by: Erik Deumens, University of Florida

Wednesday, January 11th, 2023 | Established Institutional Showcase 

• 1) A debrief from the December Stakeholder Advisory Board presented by Carolyn Ellis, University of California, San Diego

• 2) NIST Guidance for Implementing controls on HPC Erik Deumens will provide a short status report on CMMC and a preview on work done by NIST on a guidance document for implementing controls on HPC systems.

[Presentation and Q&A | Meeting Recording]

Presented By: 

• Erik Deumens, University of Florida

• Preston Smith, Purdue University

February 9, 2022 | Established Institutional Showcase | Financials & Cost Model history of Purdue University and University of Florida. Presentations include: Preston Smith of Purdue University and the 7 years of cost models with the lessons learned. Erik Deumens discusses University of Florida's journey to their current cost model. [Presentation + Q&A | Meeting Recording]

Presented By: Anurag Shankar, Indiana University

Wednesday, August 9, 2023  Training Topic 

Anurag Shankar from Indiana University shared his experiences establishing the NIST RMF at IU and provide useful tips like what to do when writing SSPs and what not to do during assessments.  [ Presentation + Q&A | Meeting Recording]

Presented By: 

• Eric Gill, Georgia Tech

• Cal Frye, Case Western Reserve University

March 9, 2022 | Training Topic | System Security Plan Innovators Check out what Georgia Tech and Case Western Reserve University are doing to streamline their SSPs. Eric Gill of Georgia Tech shares how they process and track multiple SSPs in a highly distributed environment. Cal Frye of Case Western Reserve shares and request community feedback on their proposed plan to make their SSP a sustainable, living document. [Presentation + Q&A | Meeting Recording]

Presented By: Anurag Shankar, Indiana University

April 13, 2022 | Established Institutional Showcase | Making FAQs & Documentation More User Friendly Communicating security and compliance to campus researchers is a challenge for institutional cybersecurity. Anurag Shankar from Indiana University talks about how IU is meeting this challenge through its SecureMyResearch service which uses a new approach to weaving security and compliance into research workflows through online documentation and consulting. [Presentation + Q&A | Meeting Recording]

Presented By: 

• Karen Bell, University of Memphis

• Jodi Ito, University of Hawaii

May 11, 2022| Researcher Focused Session |Compliance & Researchers: Teamwork makes the dream work |Karen Bell shares how departments at University of Memphis work together to support research compliance and encourage researchers to meet federal requirements. Jodi Ito shares how researcher focused workshops have resulted in stronger relationships through the entire workflow at University of Hawaii. [Presentation + Q&A | Meeting Recording]

Presented By: 

• Anurag Shankar, Indiana University

• Michael Parisi, HITRUST

July 13, 2022| Training Topic 

HIPAA and Protected Health Information (PHI) have been a presence within healthcare and medical schools since 2005. In the years since, they have been a leaking steadily into central IT and HPC centers as biomedical research computing needs have grown. This month Anurag Shankar from Indiana University talks about how IU implemented HIPAA for its central research cyberinfrastructure in 2007 and how its approach has evolved since then.

HITRUST presents the various resources, tools and solutions available for organizations to leverage in managing risk and compliance in the most efficient and effective way possible.  They walk through how their programs allow organizations to “assess once, report many” as it relates to executed one validated assessment to provide assurances over compliance with multiple authoritative sources including HIPAA, NIST, CMMC, ISO, etc.

 [Presentation + Q&A | Meeting Recording]

Presented By: 

• Laura Raderman, Carnegie Mellon University

September 14, 2022 |Established Institutional Showcase & Discussion 

Compliance Journey

• • • Laura Raderman shared Carnegie Mellon University's journey to NIST 800-171 compliance including challenges, developing templates, setting up several enclaves, and the external audits they've participated in. 

    • Community Check-in discussion. What should we focus on as a community? Opportunities for engagement. Note: portion was not recorded, but notes do exist following the slide deck.

[Presentation + Q&A | Meeting Recording]

Presented by: 

• Thomas Brown, University of Florida

• Raina Collins, University of Alaska 

• Alex Magid, Clark University 

• Brian Martinez, Michigan State University

Wednesday, April 12th, 2023 | Training Topic 

GRC (Governance, Risk, and Compliance) tools help organizations manage and monitor their performance against various regulatory, industry-specific, and internal policies and standards. It helps streamline and automate processes related to risk management, compliance, and governance, allowing organizations to effectively identify, assess, and mitigate potential risks and compliance issues.

This panel discussion features 4 institutions running various GRC tools to share their experiences and insights. Learn how these tools have transformed their businesses and discover the potential benefits for your own organization.

[Presentation & Q&A  | Meeting Recording]

Presented by: H. Birali Runesha and Steven Aldape, University of Chicago

Wednesday, November 9th, 2022 | Institutional Showcase

The UChicago Security Research Data Strategy (SRDS) and Secure Data Enclave (SDE): The journey and lesson learned.

[Presentation and Q&A | Meeting Recording]