Managing Controlled Unclassified Information (CUI) in Research Institutions

Abstract

In order to operate in a regulated world, researchers need to ensure compliance with ever-evolving landscape of information security regulations and best practices. This work explains the challenges of Controlled Unclassified Information (CUI) and introduces a managed research ecosystem, REED+. The workflow of this cost effective framework is presented to demonstrate how controlled research data are processed to be compliant with one of the highest level of cybersecurity in a campus environment. The framework serves as a reference model for other institutions to support CUI research. The awareness and training program developed from this work will be shared with other institutions to build a bigger CUI ecosystem.