The research information systems at many universities were designed to foster information sharing, not compartmentalization. New federal regulations like NIST SP 800-171 and DFAR 252.204-7012 can place an extraordinary burden on higher education. Purdue University has found a way to meet these requirements with minimal impact to its existing infrastructure by leveraging the cloud. The Research Environment for Encumbered Data (REED) allows Purdue to meet the regulatory demands of controlled unclassified information without making sweeping changes to the collaborative information systems its researchers depend on for fundamental research. This presentation show how we got there. This is a topic specific/intermediate level session.
Outcomes: Gain a better understanding of NIST SP 800-171 and its complex requirements * Understand how to leverage the security features of cloud service providers to meet requirements
IT Research Security Analyst, ISSM, Purdue University