Educause CPPC 2026
Aligning Culture: Turning Research Security into Institutional Practice
April 28, 2026
Anaheim, CA
Report date: July 8, 2026
Workshop Organizers and Report Writers:
Jason Armbruster, Internet2
Damon Armour, North Carolina State University
Hauke Bahr, Indiana University
Tran Cheung, New Jersey Institute of Technology
Louis Daher, Michigan University
Erik Deumens, University of Florida
Will Drake, Indiana University
Carolyn Ellis, Arizona State University
Rob Groome, University of Southern California
Chris Kurtz, Arizona State University
This report summarizes a full-day workshop delivered at EDUCAUSE CPPC ’26 on building collaborative, institution-wide approaches to research cybersecurity. The workshop focused on how institutions can respond to regulatory, sponsor, and mission-driven cybersecurity pressures through shared responsibility, coordinated governance, stakeholder engagement, and practical planning.
Through expert panels, facilitated activities, and room-wide discussion, participants identified institutional pressures, mapped key stakeholders, explored strengths and gaps, and developed near-term action steps. The report identifies key themes that emerged throughout the day, including the importance of identifying champions, using stakeholder mapping and engagement to support cohesive planning efforts, and recognizing the needs of institutions early in their compliance journey. The report also contextualizes “Aha!” moments, key insights captured by participants throughout the workshop.
The report documents resource needs identified during the workshop and highlights opportunities for RRCoP, Trusted CI, and other community groups to support future resource development. Overall, it emphasizes that sustainable research cybersecurity requires more than isolated technical or compliance efforts. It requires coordinated institutional action that supports the research mission while meeting evolving cybersecurity expectations.
[ Download Final Report ] [View Resources]