UBIT TOP PROJECTS

Cybersecurity Maturity Model Certification (CMMC)

Project Description

The Research and Economic Development department is leading a project to enhance UB’s alignment with the Cybersecurity Maturity Model Certification (CMMC) standards.

Building on insights from a Research Security Compliance Assessment by Optiv, the project focuses on implementing the action plan and task matrix developed during the assessment.

Zoom image: CMMC Model chart CMMC Model chart.

Project Fast Facts

Project Manager: Bethany Gladkowski

Projected completion of CMMC Level One self-certification: February/March 2025

Importance of CMMC compliance

Achieving CMMC Level 2 certification will enable UB to maintain its current level of Department of Defense funding and retain access to critical research projects. Based on the Optiv assessment, UB meets 72% of the requirements for Level 2 certification.

How is certification achieved?

The project focuses on documenting, developing, and refining IT policies and procedures to meet CMMC security standards, along with making targeted updates or enhancements to technical infrastructure as needed. The tasks will be collaboratively executed by various units within the VPCIO.

Timeline

A CMMC Level 1 self-assessment is anticipated to be completed by early-to-mid 2025. UB plans to collaborate with a consultant to facilitate the attainment of CMMC Level 2 certification between 2025 and 2026.