Data Security

2026 EDUCAUSE Students and Technology Report: Steady through Change

Tue, 10 Mar 2026 18:07:05 Z

Explore how students navigate technology, AI, course experiences, and workforce preparation in higher education, based on insights from 8,622 students today.

2025 EDUCAUSE Cybersecurity and Privacy Workforce in Higher Education

Thu, 29 May 2025 22:14:31 Z

This report examines the cybersecurity and privacy workforce in higher education and identifies challenges and priorities.

Frequently Asked Questions about Cyber Insurance

Fri, 16 May 2025 12:14:00 Z

This document contains advice intended for general information only. To learn how cyber insurance applies to your institution, please contact your institution’s risk management office or chief information officer.

2025 EDUCAUSE Horizon Report | Teaching and Learning Edition

Wed, 30 Apr 2025 16:49:40 Z

The 2025 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of teaching and learning, and envisions a number of scenarios and implications for that future.

2025 EDUCAUSE Horizon Action Plan: Supporting Agency, Trust, Transparency, and Involvement

Thu, 13 Mar 2025 17:09:12 Z

This report describes how advancing the future of higher education cybersecurity and privacy will be done by supporting agency, trust, transparency, and involvement among stakeholders.

EDUCAUSE Comments: Incorporating CMMC Requirements Into DOD Contracting Regulations

Fri, 06 Dec 2024 15:12:55 Z

On October 15, 2024, EDUCAUSE submitted comments to the U.S. Department of Defense (DOD) regarding its proposed changes to the department’s contracting regulations (i.e., the Defense Federal Acquisition Regulation Supplement, or DFARS) to incorporate Cybersecurity Maturity Model Certification (CMMC) requirements into the defense contracting process.

Abstract: Gender Data and Demographics Toolkit

Wed, 15 Jan 2025 17:50:16 Z

This Toolkit should serve as a resource to help better understand gender data and demographics. Collecting, storing, and sharing such data carries risks that need to be understood and addressed.

2024 EDUCAUSE Horizon Report | Cybersecurity and Privacy Edition

Tue, 24 Sep 2024 16:46:52 Z

The 2024 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of cybersecurity and privacy, and envisions a number of scenarios and implications for that future.

Abstract: Business Continuity and Disaster Recovery Toolkit

Thu, 15 Aug 2024 19:34:16 Z

Use the guidance and templates in this toolkit to prepare for disruptive events before they happen.

2024 EDUCAUSE Horizon Report | Teaching and Learning Edition

Tue, 30 Apr 2024 20:49:21 Z

The 2024 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of teaching and learning, and envisions a number of scenarios and implications for that future.

EDUCAUSE Comments: NIST SP 800-171, Revision 3

Mon, 19 Feb 2024 17:06:01 Z

EDUCAUSE submitted comments to the National Institute of Standards and Technology (NIST) on January 26, 2024, regarding the near-final draft of the NIST Special Publication (SP) 800-171 cybersecurity guidelines for controlled unclassified information (CUI) held in non-federal information systems (such as those of colleges and universities).

2023 EDUCAUSE Horizon Action Plan: Generative AI

Thu, 14 Sep 2023 17:39:55 Z

This report describes an ideal future for generative AI in higher education, drawing on the insights of a small panel of teaching and learning higher education experts, focusing on a 10-year timescale.

EDUCAUSE Comments: Draft Cybersecurity Provisions for Research Security Programs

Wed, 14 Jun 2023 22:16:58 Z

EDUCAUSE submitted comments to the White House Office of Science and Technology Policy (OSTP) on June 5, 2023, concerning the draft requirements for research security programs under National Security Presidential Memorandum 33 (NSPM-33).

Student Data Privacy and Security: A Call for Transparent Practices

Wed, 28 Sep 2022 20:08:54 Z

The results of our survey of U.S. undergraduate students to better understand students’ experiences with institutional data privacy and security.

NIST SP 800-171 Overview

Wed, 14 Sep 2022 16:00:01 Z

This overview provides a review of the timeline that introduced NIST SP 800-171 "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations" as a compliance framework, an overview of the control families for the 110 controls and a discussion of the impacts and concerns for higher education.

NIST SP 800-171 Toolkit

Wed, 14 Sep 2022 16:00:01 Z

In this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.

NIST SP 800-171 Compliance Template

Fri, 30 Sep 2016 16:20:41 Z

Higher education institutions continue to refine their understanding of the impact of NIST Special Publication 800-171 on their IT systems and the data they receive from the federal government. This compliance template will help institutions map the NIST SP 800-171 requirements to other common security standards used in higher education, and provides suggested responses to controls listed in NIST SP 800-171.

2022 EDUCAUSE Horizon Report | Data and Analytics Edition

Thu, 23 Jun 2022 14:23:31 Z

The 2022 EDUCAUSE Horizon Report profiles the trends and key technologies and practices shaping the future of data and analytics, and envisions a number of scenarios and implications for that future.

EDUCAUSE Comments: Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements

Mon, 01 Jul 2024 19:51:43 Z

On July 1, 2024, EDUCAUSE joined with the American Association of Collegiate Registrars and Admissions Officers (AACRAO), the Association of American Universities (AAU), the Association of Governing Boards of Universities and Colleges (AGB), the Association of Public and Land-grant Universities (APLU), and the National Association of Independent Colleges and Universities (NAICU) to submit comments regarding the reporting requirements proposed by the Cybersecurity and Infrastructure Security Agency (CISA) under the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).

Effective Cybersecurity for Research

Mon, 20 Jun 2022 22:01:43 Z

This paper describes an approach to cybersecurity for research that is showing great promise in breaking the security versus research impasse. A product of years of effort at Indiana University, it focuses exclusively on the researcher and the research mission, reduces the cybersecurity and compliance burden on the researcher, and aims to secure all research.