Data and Information Security
Export controls can extendÌýto the data and electronic information researchers store, access, manipulate, and transmit electronically. As such, OEC works closely with ¾«Í¯ÓûÅ® Boulder's Office of Information Technology (OIT) to identifyÌýand protectÌýcertain research-related electronic informationÌýthat requiresÌýspecific security measures per federal regulations, sponsor requirements, grant/contract clausesÌýand/or institutional policies.
The data and information security needs of researchers are identified through existing compliance procedures. Once identified, OEC assists researchers byÌýdetermining whichÌýregulations applyÌýto the electronic information (EAR, ITAR, or ¾«Í¯ÓûÅ®I/NIST-800-171) and how to adequately implement controls through a Technology Control Plan (TCP) or use of one ofÌý¾«Í¯ÓûÅ®'s availableÌýIT solutions (see below).
Data security now requires you to "know your cloud infrastructure", including where servers are located and how data is routed.
¾«Í¯ÓûÅ® Boulder's CMMC Certified IT Environment for projects involving ¾«Í¯ÓûÅ®I and Export Controls