Embedded Files
Our research will look into 6 categories that may help determine an institution's readiness for NSPM-33.
1. Governance & Roles
1. Governance & Roles
Focuses on how institutions organize responsibility for research cybersecurity.
Focuses on how institutions organize responsibility for research cybersecurity.
How roles and authority are defined across IT, research, compliance, and academic units
How decision-making happens in decentralized environments
How cybersecurity responsibilities intersect with research security and data governance
2. Risk Management & Assessment
2. Risk Management & Assessment
Explores how institutions identify, scope, and evaluate cybersecurity risks in research settings.
Explores how institutions identify, scope, and evaluate cybersecurity risks in research settings.
How research risks are conceptualized and categorized
What frameworks or methods guide assessment practices
How often risks are assessed and who participates in the process
3. Controls & Risk Mitigation
3. Controls & Risk Mitigation
Looks at how institutions select, adapt, and document cybersecurity controls that support research.
Looks at how institutions select, adapt, and document cybersecurity controls that support research.
How control decisions are made and justified
How compensating controls are used when standard practices do not fit
How technical safeguards like MFA, EDR, and incident response are applied in research environments
4. Federal Interpretation & Attestation Readiness
4. Federal Interpretation & Attestation Readiness
Examines how institutions understand and prepare for evolving federal research security expectations.
Examines how institutions understand and prepare for evolving federal research security expectations.
How NSPM-33, CHIPS, NIST guidance, and NSF controls are interpreted
How institutions anticipate meeting attestation requirements
What concerns or readiness gaps leadership perceives
5. Researcher Engagement & Cultural Factors
5. Researcher Engagement & Cultural Factors
Addresses how cybersecurity expectations are communicated to researchers and integrated into daily work.
Addresses how cybersecurity expectations are communicated to researchers and integrated into daily work.
How training and researcher-facing guidance are delivered
Where cultural or workflow barriers exist
How institutions plan to implement researcher attestation
6. Resource Models & Right-Sizing
6. Resource Models & Right-Sizing
Covers how institutions fund, staff, and scale research cybersecurity efforts.
Covers how institutions fund, staff, and scale research cybersecurity efforts.
How expertise, tools, and support structures are organized
How resource models change based on institutional size and research portfolio
How institutions determine what is feasible and proportional for their environment
Page updated
Google Sites
Report abuse