Cybersecurity Maturity Model Certification CMMC

EDUCAUSE Comments: Incorporating CMMC Requirements Into DOD Contracting Regulations

Fri, 06 Dec 2024 15:12:55 Z

On October 15, 2024, EDUCAUSE submitted comments to the U.S. Department of Defense (DOD) regarding its proposed changes to the department’s contracting regulations (i.e., the Defense Federal Acquisition Regulation Supplement, or DFARS) to incorporate Cybersecurity Maturity Model Certification (CMMC) requirements into the defense contracting process.

2024 EDUCAUSE Horizon Report | Cybersecurity and Privacy Edition

Tue, 24 Sep 2024 16:46:52 Z

The 2024 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of cybersecurity and privacy, and envisions a number of scenarios and implications for that future.

EDUCAUSE Comments: CMMC 2.0 Regulations

Wed, 28 Feb 2024 21:04:48 Z

EDUCAUSE joined COGR, AAU, APLU, and ACE in submitting comments to the U.S. Department of Defense (DoD) on February 26, 2024, regarding the DoD’s second-round of proposed regulations to implement its Cybersecurity Maturity Model Certification (CMMC) Program.

NIST SP 800-171 Overview

Wed, 14 Sep 2022 16:00:01 Z

This overview provides a review of the timeline that introduced NIST SP 800-171 "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations" as a compliance framework, an overview of the control families for the 110 controls and a discussion of the impacts and concerns for higher education.

NIST SP 800-171 Toolkit

Wed, 14 Sep 2022 16:00:01 Z

In this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.

7 Things You Should Know About Cybersecurity Maturity Model Certification (CMMC)

Thu, 15 Sep 2022 16:31:19 Z

The Cybersecurity Maturity Model Certification (CMMC) is a set of policies and practices that address the protection of federal Controlled Unclassified Information (CUI) data through administrative, physical, and technical controls.

Higher Education Regulated Research Workshop Series: A Collective Perspective

Mon, 12 Jul 2021 19:03:31 Z

After an eight month effort concluding in June of 2021, 155 participants from 84 research institutions from across the United States gathered in six facilitated, NSF-sponsored workshop sessions to determine if coming together as a community could improve the support of individual programs to secure regulated data in research involving the Department of Defense or health sciences.

EDUCAUSE Comments: DOD Interim Rule on CMMC and 800-171 Assessment

Tue, 08 Dec 2020 19:46:33 Z

EDUCAUSE joined others in commenting on the U.S. Department of Defense (DOD) interim rule that seeks to formally incorporate the Cybersecurity Maturity Model Certification (CMMC) Framework and the DOD assessment methodology and requirements for NIST SP 800-171 compliance by defense contractors into the DOD contracting regulations.

EDUCAUSE Comments: Department of Defense Cybersecurity Maturity Model Certification (CMMC) Program

Wed, 16 Sep 2020 16:08:36 Z

On September 1, 2020, EDUCAUSE joined the Council on Governmental Relations (COGR), the Association of American Universities (AAU), and the Association of Public and Land-grant Universities (APLU) in sending a letter to the U.S. Department of Defense (DOD) Office of Acquisition and Sustainment.

Higher Education Research, Cybersecurity, and CMMC Compliance

Fri, 07 Aug 2020 16:03:53 Z

This brief, a joint effort on the part of EDUCAUSE and PreVeil, was written to clarify the Department of Defense’s (DoD) new Cybersecurity Maturity Model Certification (CMMC) framework and to guide your institution on its journey to CMMC compliance.