CIO Perspectives on Research Data Security & CMMC Compliance

Higher education CIOs are sounding a clear message: CMMC compliance is rapidly becoming a determining factor in who can— and cannot— participate in federally funded research.

In a recent Internet2 webinar, campus technology leaders shared candid insights on the growing operational, cultural, and financial pressures surrounding research security. Their recommendations reinforce a broader shift underway across the community: compliance isn’t simply an IT requirement—it’s a campus-wide strategic imperative.

The panel highlighted five themes shaping the path forward:

• Building secure research environments that can scale, whether through hybrid or cloud-first architectures.
• Strengthening cross-campus partnerships between IT, compliance, and research administration.
• Preparing for major financial and cultural changes, from funding models to new expectations around external audits.
• Planning early and thoroughly for assessments, including the need for both advisory and auditing partners.
• Managing scope strategically, treating CMMC as a long-term, institution-wide project rather than a quick checklist.

A recurring concern among CIOs: smaller research institutions may struggle to keep pace, threatening the diversity and innovation that fuel the national research ecosystem. Many called for shared community solutions, including cloud-based, CMMC-compliant infrastructure that reduces duplicated effort and lowers the barrier to entry.

If your institution is navigating CMMC—or planning to begin—this discussion offers practical guidance and a stark reminder: the time to act is now.

Read the full Internet2 article: CIO Perspectives on Research Data Security and CMMC Compliance