Jay Gallman

Biography

Jay has spent a 35-year career in Higher Ed IT, with experience in desktop support and management, application support, networking, and virtualization.  IT security has been a focal point throughout his career.

In 2018 he joined the Duke University IT Security Office where he is a Risk Advisor, Jay focuses on Risk and Compliance issues. In the role of a consultant, he works with researchers to understand their workloads so that he can explain what is necessary for compliance with regulatory requirements like NIST SP 800-171. He also stays abreast of changes in the research regulation space to keep others up to date regarding their potential impact on the university.

Additionally, his responsibilities include vendor security risk assessments, and outreach activities for the campus.

Jay is currently one of the group leaders for the EDUCAISE HEISC 800-171 Compliance Community Group and an active member of the Regulated Research Community of Practice.

In May 2023 he was on the organizing committee for the Regulated Research Community of Practice 1 Day SSP Workshop and in 2020-21 was on the steering committee for The CUI Workshop Series sponsored by Purdue.

EDUCAUSE Publications

  • NIST SP 800-171 Overview
    • Policies, Guidelines, Plans and Toolkits
    • Author

    This overview provides a review of the timeline that introduced NIST SP 800-171 "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations" as a compliance framework, an overview of the control families for the 110 controls and a discussion of the impacts and concerns for higher education.

  • NIST SP 800-171 Toolkit
    • Policies, Guidelines, Plans and Toolkits
    • Author

    In this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.

See All Publications by Jay Gallman

EDUCAUSE Presentations

See All Presentations by Jay Gallman

Memberships

EDUCAUSE Member

EDUCAUSE Involvement

  • Cybersecurity and Privacy Professionals Conference 2025
    • Member: 2024 - 2025
  • EDUCAUSE Community Surveys
    • Member: 2022 - Present
  • NIST 800-171 Compliance Toolkit
    • Member: 2021 - 2022
  • HEISC Advisory Committee
    • Member: 2021 - Present
  • Community Group Leaders
    • Member: 2021 - Present