The document provides an overview of the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) 2.0, which establishes revised standards to…
Cybersecurity
Cybersecurity is critical to protecting research data and information systems from unauthorized access or misuse, ensuring the integrity of federally funded research.
Featured
Security Tomorrow, Today: Cybersecurity Updates from DARPA: June 2025 COGR Meeting
The document summarizes a June 2025 briefing presented COGR by Jesse Watkins, Deputy Director of the Security and Intelligence Directorate at DARPA, and Kris West...
What’s Hot in Cybersecurity & Implications for Institutions: February 2025 Meeting
This document provides an extensive overview of emerging cybersecurity standards and regulatory changes affecting institutions, particularly focusing on the...
Resources
Point of Contact
Kevin Wozniak
Director, Research Security & Intellectual Property
External Links
All Cybersecurity Articles
Overview of DOD Cybersecurity Model Certification 2.0 – Updated October 2025
The document provides an overview of the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) 2.0, which establishes revised standards to ensure contractors—including universities working with Controlled Unclassified Information (CUI) or Federal Contract Information (FCI)—appropriately protect sensitive data. CMMC 2.0 simplifies compliance by reducing certification levels from…
Overview of OSTP Guidelines for Research Security Programs at Covered Institutions
The OSTP Research Security Program Guidelines, released July 9, 2024, establish four required elements for research security compliance—cybersecurity, foreign travel security, research security training, and export control training—at institutions exceeding a $50 million annual federal R&D threshold, with detailed timetables for agency and institutional implementation. The Guidelines promote u
COGR Joins a Multi-Association Response to the Request for Comments to Docket Number DoD–2023–OS–0063 / Regulatory Identifier Number (RIN) 0790–AL49, “Cybersecurity Maturity Model Certification (CMMC) Program”
The collective comments submitted by the American Council on Education (ACE), Association of American Universities (AAU), Association of Public and Land-Grant Universities (APLU), COGR, and EDUCAUSE address the Department of Defense’s proposed updates to the Cybersecurity Maturity Model Certification (CMMC) Program. The associations commend the DoD for recognizing that fundamental research general…
COGR, EDUCAUSE, and AAU Submit Joint Comment Letter to GSA on Cyber Threat and Incident Reporting & Information Sharing (FAR 2021-017)
EDUCAUSE, COGR, and the Association of American Universities (AAU) submitted comments expressing concern over the scope and impact of the proposed changes in Federal Acquisition Regulation Case 2021-017, which would require all federal contractors—including higher education institutions engaged in fundamental research—to comply with broad cyber incident reporting and software bill of materials (SB
COGR’s Releases Paper on “Foreign Influence—Practical Considerations in Developing an Institutional Response”
This document outlines the increasing federal scrutiny on inappropriate foreign influence in U.S. academic research and offers practical considerations for institutions to develop effective research security responses. Triggered by concerns such as undisclosed foreign funding, participation in foreign government talent programs, and intellectual property theft—especially with a focus on China—U.S.
Institutional Experiences with CMMC: February 2021 Meeting
The document summarizes a panel discussion on the institutional experiences of universities with the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC), highlighting perspectives from UC San Diego, Purdue University, and Indiana University. The discussion addresses recent DoD regulatory changes requiring contractors to achieve at least Level 1 CMMC certification, emphasizing
Joint Association Letter to DoD Regarding CMMC (DFARS Case 2019-D041)
The letter, jointly submitted by the Council on Governmental Relations (COGR), EDUCAUSE, the Association of American Universities (AAU), the Association of Public and Land-grant Universities (APLU), and the American Council on Education (ACE), articulates deep concerns regarding the Department of Defense’s (DOD) interim rule implementing the NIST Special Publication 800-171 Assessment Methodology
COGR Joins Multi-Association Letter Expressing Concern about DOD and the CMMC Accreditation Body
The document is a formal letter dated September 1, 2020, from four major academic organizations—EDUCAUSE, the Council on Governmental Relations (COGR), the Association of American Universities (AAU), and the Association of Public and Land-grant Universities (APLU)—addressed to Ellen M. Lord, Under Secretary of Defense for Acquisition and Sustainment. The letter expresses concerns regarding the Dep
