Research security: what auditors must know in 2022

Baker Tilly recently hosted a webinar with the Association of College & University Auditors (ACUA) for higher education audit, internal audit and risk professionals on research security developments.

Research dollars and data now come with more terms and conditions than ever before. Many of these “newer” requirements are related to previous efforts to protect the current and future value of information/data, especially when funded by the federal government. Unfortunately, grants, contracts and cooperative agreements contain so many disparate research security terms that it is difficult to determine what really matters and what your institution needs to address.

To effectively address these requirements, stakeholders from across the institution must work together, as this is not simply an administrative, technology or cybersecurity problem. As such, information technology, cybersecurity and sponsored program professionals, faculty, principal investigators, compliance professionals, research administrators and in some cases, students, must be prepared to help the institution start to address these requirements now. Your campus colleagues will be looking for you to provide insight, guidance and key support.

In this session, Baker Tilly’s higher education specialists present the latest developments regarding research security, including National Security Presidential Memorandum 33 (NSPM-33), Controlled Unclassified Information (CUI), Export Controls and Cybersecurity Maturity Model Certification (CMMC) Version 2.0 and what these requirements might mean for your institution. We discuss the most challenging aspects of meeting these requirements in the higher education environment and answer attendee’s specific questions.

Key takeaways

After watching this session, you will be able to:‎

• Understand the latest research security developments and how they impact higher education
• Gain insight into industry-specific questions on these developments and requirements that impact your institution
• Take away a list of challenging requirements and potential solutions

Presenters and subject matter specialists

• Mike Cullen, CISA, CISSP, CIPP/US, Principal and Higher Education Cybersecurity Leader, Baker Tilly
• Matt Gilbert, CISA, CRISC, Principal and CMMC Leader, Baker Tilly
• Adrienne Larmett, CRA, Principal, Baker Tilly