[NEW] August 2025 Edition of Ask the Assessor: Secure Software in Research
November 2020 - July 2021 [View Landing Page]
Problem Addressed: Institutions that support either BioMedical and Department of Defense research contracts were each independently developing their own solutions. People lacked internal institution peers to seek help from.
About: During an eight month effort concluding in June of 2021, 155 participants from 84 research institutions from across the United States gathered for six facilitated, NSF-sponsored workshop sessions to determine if coming together as a community could improve the support of individual programs to secure regulated data in research involving the Department of Defense or health sciences.
Delivered: 6 pillars of regulated research programs, with known practices and resources.
Final report, Higher Education Regulated Research Workshop Series: A Collective Perspective, is published with EDUCAUSE at https://library.educause.edu/resources/2021/7/higher-education-regulated-research-workshop-series-a-collective-perspective. The report was co-authored by contributors from Purdue University, Duke University, University of Florida, Indiana University, Case Western Reserve University, University of Central Florida, Clemson University, Georgia Institute of Technology, and University of South Carolina.
May 2023 [View Landing Page]
Problem Addressed: Due to the privacy of the responses, most people had never seen a System Security Plan that wasn’t their own. No baselines existed to answer ”How much of a response is enough and what is too much?”
May 2024 [View Landing Page]
Problem Addressed: Talking to assessors is expensive, and you typically need to be nearing perfection before you would engage with a CMMC Assessor. Additionally, there is no venue for problem-solving conversations.
May 2025