Learning Lab | Building CMMC Readiness in Higher Ed: July 2026

Part 1: July 20, 2026 | 3:00–4:30 p.m.ET
Part 2: July 22, 2026 | 3:00–4:30 p.m.ET
Part 3: July 27, 2026 | 3:00–4:30 p.m.ET
Part 4: July 29, 2026 | 3:00–4:30 p.m.ET

Overview

The Cybersecurity Maturity Model Certification (CMMC) is rapidly becoming a requirement for higher education institutions engaged in federally funded research, especially those handling Controlled Unclassified Information (CUI). This Learning Lab gives higher ed cybersecurity and research security professionals the practical tools, strategies, and templates to move their institutions toward CMMC readiness. Whether you’re preparing your first enclave or refining an existing one, you’ll gain hands-on experience in scoping, building a System Security Plan (SSP), identifying and organizing assessment evidence, and preparing to work with a Certified Third-Party Assessment Organization (C3PAO). Along the way, you’ll practice translating your technical progress into leadership-focused communications that help secure institutional buy-in, budget, and collaboration.

Learning Outcomes:

NOTE: You will be asked to complete assignments in between the live sessions that support the learning outcomes stated below. You will receive feedback and constructive critique from facilitators.

Learning Outcomes:

• Define and document the scope of a CMMC research enclave in a higher ed environment, including key asset categories and boundaries.
• Draft and structure a System Security Plan (SSP) that reflects institutional practices and supports efficient CMMC assessment.
• Identify and organize assessment evidence and supporting documentation aligned to NIST 800-171 controls.
• Describe effective strategies for engaging institutional leadership and stakeholders in CMMC preparation and governance.
• Plan and communicate readiness to engage with a C3PAO for formal assessment and ongoing compliance efforts.