Research Publications

The effective protection and management of research data has become a hot topic in U.S. higher education. Funding agencies increasingly require data management plans as part of grant submittals…

This ECAR research bulletin addresses the data privacy issues that must be covered by contractual language when entering into an agreement for externally provided IT services or for external con…

This ECAR research bulletin covers experiences and lessons learned from 10 IT leaders who have transitioned their institutions to an outsourced e-mail solution. It provides data from the 2009 EC…

This ECAR research bulletin discusses the trend to use a variety of risk assessment frameworks and standards to create an information security program that is sufficiently comprehensive for colle…

This research bulletin details the procedures and processes undertaken by the University of Minnesota to ensure that all employees, from student workers and custodial staff through senior researc…

This research bulletin describes a functional framework for higher education compliance with the HIPAA IT security final rule. The framework, which can be adapted for individual universities, inc…

Faced with the challenge of quickly developing, delivering, tracking, and reporting customized HIPAA training for 17,000 workers and students, the University of Minnesota leveraged important piec…

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) includes complex legislation that impacts higher education but was not specifically written with academic institutions in m…