New Federal Data Protection Requirements Impact Higher Education Institutions

Abstract

In July 2017, Deloitte and EDUCAUSE convened an expert panel to discuss the implications for higher education institutions in protecting controlled unclassified information (CUI) received from the federal government in institutional information technology systems. Chief information officers and chief information security officers from American University, Coppin State University, George Washington University, Montgomery College, and Virginia Tech shared their insights about Controlled Unclassified Information (CUI) data protection requirements and their approaches to achieving compliance with those requirements. This paper provides a high level summary of their discussion as well as a roadmap for compliance activities.

Related Resources:

• An Introduction to NIST Special Publication 800-171 for Higher Education Institutions   
• NIST SP 800-171 & CUI with Ron Ross Webinar
• NIST SP 800-171 Compliance Template by the Common Solutions Group