Tools & Templates

Higher Education 

Recent

• • AI Assistant Development Resources for Regulated Research created by: Tommy Tunks, University of Michigan 

    • These materials were developed as part of an ongoing effort to explore the responsible use of AI in research administration and research security contexts. The resource package includes assistant prompts, curated knowledge-base materials, evaluation question sets, and supporting tools used for testing, prompt refinement, and quality assurance. The materials are shared as examples of an iterative development process rather than a prescriptive solution. Institutions should adapt them to their own policies, risk tolerance, and governance frameworks.

  • 2026 - CMMC Level 2 Ver 2.13 Assessment Controls and Objectives created by: Michael Wilson, UConn

Prior

EDUCAUSE 800-171 Community Group Toolkit

• Community Developed SSP with 43 controls

• NIST 800-171 Overview

• Control Evaluation

• 7 Things you should know about CMMC

• Project Phase Planning

• NIST SP 800-171 Compliance Template

• Cornell's Data Storage Tool | Download

• • Carnegie Mellon University's NIST-800-171 Template & CMMC Template

  • 2024 - Wendy Epley's NIST 800-171 Self Assessment 

  • 2022 - Anurag Shankar's, Indiana  University, DFARS-SSP-Template **Make your own copy before editing

  • 2022 Sean Hagan, University of Alaska, Compliance Matrix (CMMC, HIPAA, PCI, GLBA, 800-171, NSPM-33...) **Comments welcome for requests or typos

  • Brigham Young University  NIST 800-171 Template (policies, effort, severity) shared by Chad Tracy

  • Berkeley's Change Management Template

NIST 

• • 800-171 SSP Template

CRSC - Computer Security Resource Center

• 800-171 

• CUI SSP Templates (word)

• CUI SSP Templates (word)

CISA - Cybersecurity and Infrastructure Agency

• https://www.cisa.gov/free-cybersecurity-services-and-tools includes a ~100 of collected tools designed to:

  1. • Reducing the Likelihood of a Damaging Cyber Incident

     • Take Steps to Quickly Detect a Potential Intrusion

     • Ensure That The Organization is Prepared to Respond if an Intrusion Occurs

     • Maximize the Organization's Resilience to a Destructive Cyber Incident