2025 Impact Summary is now live (12/16/25)
November 2020 - July 2021 [View Landing Page]
Problem Addressed: Institutions that support either BioMedical and Department of Defense research contracts were each independently developing their own solutions. People lacked internal institution peers to seek help from.
About: During an eight month effort concluding in June of 2021, 155 participants from 84 research institutions from across the United States gathered for six facilitated, NSF-sponsored workshop sessions to determine if coming together as a community could improve the support of individual programs to secure regulated data in research involving the Department of Defense or health sciences.
Delivered: 6 pillars of regulated research programs, with known practices and resources.
Final report, Higher Education Regulated Research Workshop Series: A Collective Perspective, is published with EDUCAUSE at https://library.educause.edu/resources/2021/7/higher-education-regulated-research-workshop-series-a-collective-perspective. The report was co-authored by contributors from Purdue University, Duke University, University of Florida, Indiana University, Case Western Reserve University, University of Central Florida, Clemson University, Georgia Institute of Technology, and University of South Carolina.
May 2023 [View Landing Page]
Problem Addressed: Due to the privacy of the responses, most people had never seen a System Security Plan that wasn’t their own. No baselines existed to answer ”How much of a response is enough and what is too much?”
Delivered: Draft community developed SSP
May 2024 [View Landing Page]
Problem Addressed: Talking to assessors is expensive, and you typically need to be nearing perfection before you would engage with a CMMC Assessor. Additionally, there is no venue for problem-solving conversations.
Delivered: Workshop Report
May 2025 [View Landing Page]
Problem Addressed: Achieving compliance becomes a whole new journey to sustain this compliance. How are other institutions managing their compliance documentation so that it doesn't immediately become shelfware?
Delivered: Workshop report