Have you taken any actions to remove business operations within Ukraine?

Russian Invasion of Ukraine Risk Management

We are maintaining current operations26%

We have evacuated all international workforce staff44%

We have evacuated non-essential international workforce staff13%

We have relocated some or all of our workforce within Ukraine4%

Other (share below)11%

152 PARTICIPANTS

1.9k views1 Comment

Sort by:

Director of IT in Software3 years ago

There are no business operations related to Ukraine.

Content you might like

Does your org encourage employees to opt out of data sharing with their personal mobile provider?

Yes47%

Only for employees using personal devices for work37%

No12%

Don't know / show results2%

View Results

Are any social media apps banned on your corporate devices?

Yes, multiple30%

Yes, one37%

No27%

Don't know3%

View Results

Which tech conference do you intend to attend in person next year or have already participated in this year, and what motivated your choice?

Read More Comments

Can anyone provide a recommendation on key questions to include in an RFP for Denied Party Screening tools? Also, can you recommend any service providers? We currently use E2Open (BluJay), and one of their solutions is coming EOL.

Seeking insights for research universities regarding CMMC 2.0 adoption and compliance. I'm listing our full question set below, but we would welcome insights on any or all of these:

1. What is the anticipated timeline for CMMC 2.0 adoption by the Federal Government? Any insights on the expected rollout and implementation schedule?

2. From a Higher Ed CIO perspective, what are the key operational differences between each "level" in CMMC 2.0? Are there any specific challenges or considerations especially for research universities?

3. For a research university, which CMMC level would be the most suitable target? Are there any key dates or deadlines that Higher Eds and researchers should be aware of in their compliance journey?

4. What are the most crucial features or elements of CMMC that universities need to achieve compliance? Any recommendations or best practices?

5. Specifically, are there any requirements in CMMC for 7/24/365 "eyes on glass" network and/or endpoint monitoring? If there is an endpoint requirement, does it extend to all servers and laptops issued by the university, or is it limited to hosts involved in research grants? What is expected to demonstrate compliance in this regard?

6. Apart from CMMC compliance, are there other considerations or or strategies to consider when seeking to qualify for/reduce cyber risk insurance costs?