CICI: UCSS: Building a Community of Practice for Supporting Regulated Research

CICI：UCSS：建立支持监管研究的实践社区

• 批准号: 2409859
• 负责人: Carolyn Ellis
• 金额: $ 49.98万
• 依托单位: Arizona State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-12-01 至 2025-01-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2409859&HistoricalAwards=false
• 关键词: CICI; UCSS; Building; Community; Practice; CICI; UCSS; Building; Community; Practice

The daily news clearly shows the increasing threat to safety and privacy of data, personal as well as intellectual property. The Department of Defense modified the DFARS clause to mandate that NIST 800-171 be followed for data classified and marked as CUI in 2017. The next evolution of this program is called Cybersecurity Maturity Model Certification CMMC. Other agencies, for example, Department of Education, have indicated that they are considering following a similar path to safeguard data. While these requirements improve the consistency of data handling between agencies and contractors and grantees, it leaves academic institutions to figure out how to meet such requirements in a cost-effective way that fits the research and education mission of the institution. Most institutions, agencies, and companies act in isolation with one-off contract language to address data security and safeguarding concerns. The Regulated Research Community of Practice (RRCoP) builds a network of people able to help each other in implementing an affordable but effective cybersecurity and compliance program at academic institutions. Even though cybersecurity has a clear and uniform goal of protecting data, a onesize solution does not fit all academic institutions.Through this project, RRCoP accomplishes 1) Developing cybersecurity training resources that share validated and diverse best-practices. 2) Establishing a leadership training and development program accelerating availability of distributed university resources 3) Developing representation through strategic partnerships with industry and government entities. By supporting this community with development of a community strategic roadmap, regular discussions and workshops, and a repository of generalized and specific resources for handling regulated research programs RRCoP lowers the barrier to entry for institutions handling new regulations.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

每日新闻清楚地表明，对数据的安全和隐私，个人和知识产权的威胁日益增加。国防部修改了DFARS条款，要求将NIST 800-171遵循2017年分类和标记为CUI的NIST 800-171。该计划的下一个演变称为网络安全成熟度模型认证CMMC。例如，其他机构教育部表示，他们正在考虑遵循与保护数据相似的途径。尽管这些要求提高了代理商，承包商和受赠方之间数据处理的一致性，但它使学术机构可以弄清楚如何以适合该机构的研究和教育使命的方式满足此类要求。大多数机构，机构和公司用一次性合同语言孤立地采取行动，以解决数据安全和保护问题。受监管的研究社区（RRCOP）建立了一个能够互相帮助的人网络，以在学术机构实施负担得起但有效的网络安全和合规计划。尽管网络安全具有保护数据的明确而统一的目标，但替代解决方案并不适合所有学术机构。通过该项目，RRCOP实现了1）开发具有共享验证和不同最佳实践的网络安全培训资源。 2）建立一项领导力培训和发展计划，以加速分布式大学资源的可用性3）通过与行业和政府实体建立战略伙伴关系来发展代表性。通过开发社区战略路线图，定期讨论和讲习班以及用于处理受监管的研究计划的广义和特定资源的存储库来支持这个社区，从而降低了处理新法规的机构进入障碍。该奖项反映了NSF的法定任务，并通过使用基金会的智力效果进行评估，并通过评估了支持。