EDUCAUSE Publications

• NIST SP 800-171 Overview

  • September 16, 2022
  • Policies, Guidelines, Plans and Toolkits
  • Author

  This overview provides a review of the timeline that introduced NIST SP 800-171 "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations" as a compliance framework, an overview of the control families for the 110 controls and a discussion of the impacts and concerns for higher education.

• NIST SP 800-171 Toolkit

  • September 16, 2022
  • Policies, Guidelines, Plans and Toolkits
  • Author

  In this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.

• 7 Things You Should Know About Cybersecurity Maturity Model Certification (CMMC)

  • September 15, 2022
  • Briefs, Case Studies, Papers, Reports
  • Contributor

  The Cybersecurity Maturity Model Certification (CMMC) is a set of policies and practices that address the protection of federal Controlled Unclassified Information (CUI) data through administrative, physical, and technical controls.