Compliance

2026 EDUCAUSE Horizon Report | Teaching and Learning Edition

Tue, 12 May 2026 18:19:08 Z

The 2026 EDUCAUSE Teaching and Learning Horizon Report highlights how artificial intelligence, enrollment pressures, policy shifts, and sustainability concerns are reshaping instructional practice and institutional strategy.

2025 EDUCAUSE Cybersecurity and Privacy Workforce in Higher Education

Thu, 29 May 2025 22:14:31 Z

This report examines the cybersecurity and privacy workforce in higher education and identifies challenges and priorities.

Frequently Asked Questions about Cyber Insurance

Fri, 16 May 2025 12:14:00 Z

This document contains advice intended for general information only. To learn how cyber insurance applies to your institution, please contact your institution’s risk management office or chief information officer.

2025 EDUCAUSE Horizon Report | Teaching and Learning Edition

Wed, 30 Apr 2025 16:49:40 Z

The 2025 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of teaching and learning, and envisions a number of scenarios and implications for that future.

2025 EDUCAUSE Horizon Action Plan: Supporting Agency, Trust, Transparency, and Involvement

Thu, 13 Mar 2025 17:09:12 Z

This report describes how advancing the future of higher education cybersecurity and privacy will be done by supporting agency, trust, transparency, and involvement among stakeholders.

EDUCAUSE Comments: Incorporating CMMC Requirements Into DOD Contracting Regulations

Fri, 06 Dec 2024 15:12:55 Z

On October 15, 2024, EDUCAUSE submitted comments to the U.S. Department of Defense (DOD) regarding its proposed changes to the department’s contracting regulations (i.e., the Defense Federal Acquisition Regulation Supplement, or DFARS) to incorporate Cybersecurity Maturity Model Certification (CMMC) requirements into the defense contracting process.

Abstract: Gender Data and Demographics Toolkit

Wed, 15 Jan 2025 17:50:16 Z

This Toolkit should serve as a resource to help better understand gender data and demographics. Collecting, storing, and sharing such data carries risks that need to be understood and addressed.

2024 EDUCAUSE Horizon Report | Cybersecurity and Privacy Edition

Tue, 24 Sep 2024 16:46:52 Z

The 2024 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of cybersecurity and privacy, and envisions a number of scenarios and implications for that future.

EDUCAUSE Comments: FAR Cyber Incident Reporting

Mon, 19 Feb 2024 17:29:33 Z

On February 2, 2024, EDUCAUSE was joined by COGR and the Association of American Universities (AAU) in submitting comments on proposed changes to the Federal Acquisition Regulation (FAR) that could impose cyber incident reporting and software bill of materials (SBOM) development/maintenance obligations on all federal contractors, including colleges and universities.

EDUCAUSE Comments: NIST SP 800-171, Revision 3

Mon, 19 Feb 2024 17:06:01 Z

EDUCAUSE submitted comments to the National Institute of Standards and Technology (NIST) on January 26, 2024, regarding the near-final draft of the NIST Special Publication (SP) 800-171 cybersecurity guidelines for controlled unclassified information (CUI) held in non-federal information systems (such as those of colleges and universities).

The Cybersecurity and Privacy Workforce in Higher Education, 2023

Fri, 03 Nov 2023 15:04:30 Z

This report examines the cybersecurity and privacy workforce in higher education.

EDUCAUSE Comments: Proposed ADA Web/Mobile App Accessibility Regulations

Wed, 25 Oct 2023 15:30:51 Z

EDUCAUSE submitted comments on October 3, 2023, in which the association expressed support for the proposed technical standard but urged DOJ to make compliance with the then-pending WCAG 2.2 standard as well as possible future versions of WCAG a compliance/litigation safe harbor.

2023 EDUCAUSE Horizon Action Plan: Generative AI

Thu, 14 Sep 2023 17:39:55 Z

This report describes an ideal future for generative AI in higher education, drawing on the insights of a small panel of teaching and learning higher education experts, focusing on a 10-year timescale.

The Higher Education CPO Primer: A Welcome and How-To Kit for Chief Privacy Officers in Higher Education

Wed, 31 May 2023 14:08:07 Z

The primary audience for this primer is a chief privacy officer (CPO) or a person with primary institutional responsibility for privacy.

EDUCAUSE Comments: Examples of TPS Guidance Problems (with ARL)

Fri, 31 Mar 2023 14:43:01 Z

EDUCAUSE joined with the Association of Research Libraries (ARL) to submit comments to the U.S. Department of Education regarding its February 2023 guidance on third-party servicers (TPSs).

EDUCAUSE Comments: Dept. of Ed. Guidance on Third-Party Servicers (TPSs)

Wed, 08 Mar 2023 20:51:16 Z

EDUCAUSE submitted comments to the U.S. Department of Education (ED) on March 7, 2023, in response to a “Dear Colleague Letter” (DCL) from ED reinterpreting the department’s regulatory guidance on “Third-Party Servicers” (TPSs).

2023 EDUCAUSE Horizon Action Plan: Data Governance

Wed, 22 Feb 2023 17:49:39 Z

This report describes an optimized future for data governance in higher education, drawing on the insights of a small panel of data and analytics higher education experts, focusing on a 10-year timescale.

Student Data Privacy and Security: A Call for Transparent Practices

Wed, 28 Sep 2022 20:08:54 Z

The results of our survey of U.S. undergraduate students to better understand students’ experiences with institutional data privacy and security.

NIST SP 800-171 Overview

Wed, 14 Sep 2022 16:00:01 Z

This overview provides a review of the timeline that introduced NIST SP 800-171 "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations" as a compliance framework, an overview of the control families for the 110 controls and a discussion of the impacts and concerns for higher education.

NIST SP 800-171 Toolkit

Wed, 14 Sep 2022 16:00:01 Z

In this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.