Research Information Protection
Research Information Protection & Cybersecurity
Overview
Research Information Protection & Cybersecurity is a component of Stony Brook University's Research Security Program that helps faculty, staff, and students identify research information protection and cybersecurity requirements applicable to research activities.
Federal research sponsors increasingly require institutions to protect research information through research security programs, sponsor award terms and conditions, contractual obligations, and other regulatory requirements. These requirements support the federal research security framework established under National Security Presidential Memorandum-33 (NSPM-33) and related federal guidance.
The Office of Research Security (ORS) administers research information protection and cybersecurity activities within the Research Security Program and assists researchers in identifying applicable sponsor, contractual, regulatory, export control, privacy, and institutional requirements affecting research information. ORS provides guidance throughout the research lifecycle and coordinates with the appropriate University offices to support implementation of required safeguards.
CONTACT ORS | VIEW RESEARCH ACTIVITIES & GUIDANCE
How ORS Can Help
Reviews & Determinations
- Research information protection reviews
- Sponsor safeguarding and cybersecurity requirements
- Government information reviews
- Export-controlled information reviews
- Project-specific safeguarding requirements
Research Support
- Data Protection Plans
- Government information guidance
- Research cybersecurity consultations
- International data-sharing guidance
- Secure research computing coordination
- Coordination with University offices
Guidance & Training
- Faculty consultations
- Sponsor-specific guidance
- Educational resources
- Research security training
University Resources
Research information protection and cybersecurity may require support from multiple University offices depending on the research activity and applicable requirements.
ORS serves as the administrative lead and point of contact for research information protection and cybersecurity requirements within the Research Security Program. ORS identifies applicable research-specific requirements and coordinates with Research Computing & Informatics (RCI), DoIT and/or SBM-IT, the Office of Sponsored Programs, and other University offices, as appropriate, to support implementation.
University technology resources and services are available to help researchers identify computing, storage, cybersecurity, information security, and other technical solutions appropriate for the requirements applicable to their research.
University RESEARCH DATA PROTECTION & CYBERSECURITY RESOURCES
Sponsor and Institutional Requirements
Research information protection and cybersecurity requirements are project-specific and may arise from sponsor award terms and conditions, federal or state regulations, contractual obligations, export control requirements, privacy requirements, University policies, and other institutional requirements.
Stony Brook University's Sensitive Information Classification Policy establishes the University-wide framework for classifying University Data and determining appropriate information protection requirements. Research information may also be subject to additional or more specific sponsor, contractual, regulatory, export control, privacy, government, or data-provider requirements.
ORS assists researchers in identifying research-specific requirements and coordinates with the appropriate University offices to support implementation throughout the research lifecycle.
Sensitive Information Classification Policy
RESEARCH DATA OWNERSHIP, RETENTION AND ACCESS POLICY
Research Activities & Guidance
ORS has developed activity-based guidance to help researchers identify the research information protection, cybersecurity, sponsor, contractual, export control, privacy, and institutional requirements that may apply to common research activities.
Researchers planning activities involving research information should consult the applicable activity guides to identify potential requirements and determine when additional review or coordination may be needed.
BROWSE RESEARCH ACTIVITIES & GUIDANCE
Research Information Protection & Cybersecurity Reference Guides
ORS maintains reference guides that explain research information protection principles, federal cybersecurity requirements, sponsor expectations, and research security concepts.
These guides provide additional background information and should be used in conjunction with the activity-based guidance above.
The reference guides address research information classification, safeguarding practices, restricted research information, federal cybersecurity requirements, and restrictions on certain technologies and services.
BROWSE RESEARCH INFORMATION PROTECTION & CYBERSECURITY REFERENCE GUIDES
Contact ORS if you are uncertain whether research information protection, cybersecurity, sponsor, contractual, export control, privacy, government, data access, or institutional requirements apply to a research activity.
ORS will assist in identifying applicable research-specific requirements and coordinate with the appropriate University offices when additional administrative, physical, or technical safeguards are required.