Enterprise CUI (eCUI) Information & Help

Enterprise CUI (eCUI)

eCUI is a virtual computing infrastructure to support research projects involving Controlled Unclassified Information (CUI) data which must follow the NIST 800-171R1 standard for data protection. The eCUI environment is comprised of a series of technical and administrative controls designed to protect data and is configurable to support a range of research computing needs. A separate CUI instance is created and used for each project, providing:

Virtual desktops and servers configured to run Window 10, Windows Server 2016 or Red Hat Linux v7

• Options for memory and storage to meet research requirements
• Installation of approved software onto the virtual systems
• Secure data transfer in and out of the controlled environment

Account Management

Note: Only Principal Investigators (PI) (or designees) of research projects can request these services. Faculty, staff, students, and others involved in the research project and authorized to access the environment can use it. 

Principal Investigators (PI) of research projects should first request the research consultation service to review the technical requirements for their research project with the Office of Research Computing and Information Technology Services.  If eCUI is determined to be a suitable platform, the PI will be provided information on how to request the project setup in eCUI.  The request will be reviewed to ensure the project has an approved Technology Control Plan and that all project personnel have undergone background checks and have completed the required training. Once the project has been provisioned, the PI can request to add/remove users and add software to the virtual computing system and request Globus Access or Allowlist for Data Transfer in/out of the environment.

Policy

All users of the George Mason University network must adhere to University Policy Number 1301: Responsible Use of Computing.

Users must also adhere to:

• University Policy Number 1114:  Data Stewardship
• University Policy Number 1311: Information Technology Security Program
• University Policy Number 1316: Controlled Unclassified Information

Additional Information

Once the project has been approved, all project personnel must complete Export Control, Insider Threat, ITS Security Awareness training and TCP or CUI-SP training prior to being granted access to the eCUI environment. 

Configuration Options and Details 

Key: O= Optional; *= Configurable with ITS Review

Applications

Key: L= Local Install; A= Available via Citrix Workspace