Cybersecurity

Digital Identity, Traceability, and Security Compliance

Create an ORCiD

Digital Persistent Identifiers

NSF, NIH and other federal agencies now require a digital persistent identifier. ORCiD provides a persistent digital identifier that distinguishes you from every other researcher and, through integration in key research workflows such as manuscript and grant submission, supports automated linkages between you and your professional activities ensuring that your work is recognized.
Protecting Controlled Unclassified Information in Non-federal Systems and Organizations

NIST 800-171

NIST Special Publication 800-171 outlines cybersecurity requirements for organizations that handle Controlled Unclassified Information (CUI) on non-federal information systems. Researchers working with federally funded projects, defense-related research, or sensitive government information may be required to follow these security controls to protect data confidentiality and maintain compliance with sponsor requirements.

Controlled Research Information & Cybersecurity

CMMC

Cybersecurity Maturity Model Certification

The Cybersecurity Maturity Model Certification (CMMC) is a U.S. Department of Defense (DoD) cybersecurity framework designed to protect sensitive defense information throughout the defense industrial base. Researchers working on DoD-funded projects may be required to implement specific cybersecurity controls and demonstrate compliance with CMMC requirements when handling covered information or conducting research under applicable contracts.
CUI

Controlled Unclassified Information

Controlled Unclassified Information (CUI) is defined as information that requires safeguarding or dissemination controls pursuant to and consistent with applicable law, regulations, and government-wide policies but is not classified.

SDSU’s CUI Policy is outlined in the Senate Policy File section 2.0. Before applying for a grant or project which may require handling or processing CUI, it’s important to understand what increased cybersecurity control may be required. In addition, time will be needed to complete an assessment which will add time to the submission process.