Cybersecurity for Research on Campus: Not Just HIPAA & FISMA

Research is diverse, and that diversity is reflected in its needs for information security. While the needs for some research are clear (e.g., research driven by regulated data), the security needs of other research is less clear. This session will provide an ontology of the spectrum of research from a security perspective, how to categorize it, and how to start assessing and managing risk. It will cover research with regulated data as well as research with less well-defined needs such as "open science," illustrating each case through tabletop exercises.

Outcomes: Understand an ontology of research activities from an information security perspective * Learn how to categorize campus research activities based on information security needs * Start assessing and managing risk for research based on its categorization