Data and Information Security
Export controls can extendÌýto the data and electronic information researchers store, access, manipulate, and transmit electronically. As such, OEC works closely with Å·ÃÀ¿Ú±¬ÊÓƵ Boulder's Office of Information Technology (OIT) to identifyÌýand protectÌýcertain research-related electronic informationÌýthat requiresÌýspecific security measures per federal regulations, sponsor requirements, grant/contract clausesÌýand/or institutional policies.
The data and information security needs of researchers are identified through existing compliance procedures. Once identified, OEC assists researchers byÌýdetermining whichÌýregulations applyÌýto the electronic information (EAR, ITAR, or Å·ÃÀ¿Ú±¬ÊÓƵI/NIST-800-171) and how to adequately implement controls through a Technology Control Plan (TCP) or use of one ofÌýÅ·ÃÀ¿Ú±¬ÊÓƵ's availableÌýIT solutions (see below).
Data security now requires you to "know your cloud infrastructure", including where servers are located and how data is routed.
Å·ÃÀ¿Ú±¬ÊÓƵ Boulder's CMMC Certified IT Environment for projects involving Å·ÃÀ¿Ú±¬ÊÓƵI and Export Controls