In this episode, Jacob speaks with a panel of information security experts from universities about CMMC and their experience preparing for it!

They discuss security and compliance challenges at universities, the Penn State NIST 800-171 False Claims Act lawsuit, and much more!

Here are some highlights from the episode:

• How universities are different from other types of organizations
• Different compliance requirements for universities
• Who is involved in the execution of a government contract?
• The drivers of cybersecurity compliance at universities
• Thoughts on the Penn State False Claims Act lawsuit
• How to drive positive cybersecurity change at a university
• CUI enclaves at universities
• Areas of CMMC that need clarification

Here are the panelists:

• Jay Gallman - Duke University (https://www.linkedin.com/in/jay-gallman/)
• Kolin Hodgson - Notre Dame (https://www.linkedin.com/in/kolin-hodgson-cisa-cissp-4bbb9a/)
• Melissa Kimble - University of Maine (https://www.linkedin.com/in/melissa-kimble/)
• Wendy Epley - University of Arizona (https://www.linkedin.com/in/wendyepley/)

Thanks to our sponsor Keeper Security!

Need a secure file sharing solution? Register for a webinar showing how Defense Contractors can share sensitive information using Keeper: https://grcacademy.io/ref/keeper/webinar-cmmc-file-sharing-april-2024/

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s1-e20&utm_campaign=courses

Need a FedRAMP authorized Password Manager?

Start a free 14-day trial of Keeper: https://grcacademy.io/ref/keeper/b2b-trial/

See the CMMC controls that Keeper meets: https://grcacademy.io/ref/keeper/cmmc-controls-sheet/