Contributing Editor: Jarret Cummings, Senior Advisor for Policy and Government Relations, EDUCAUSE
EDUCAUSE responded to a July 2026 Department of Defense (DoD) request for information on a task force review of the Cybersecurity Maturity Model Certification program. EDUCAUSE emphasized that more flexible cybersecurity requirements would facilitate institutional compliance and called for greater institutional access to DoD compliance experts and resources.
The Trump administration's revamp of the regulations governing federal contracts incorporates positive changes to the controlled unclassified information (CUI) provisions proposed under a prior rulemaking. EDUCAUSE comments on the currently proposed regulations, however, highlight the need for additional improvements.
The House passed the Kids Internet and Digital Safety Act with bipartisan support, but the bill faces an uncertain path in the Senate after omitting the contested "duty of care" provision.
President Trump has signed a new executive order focused on artificial intelligence (AI) innovation and cybersecurity, directing federal agencies to strengthen their cyber defenses, expand access to AI-enabled cybersecurity tools, and establish a voluntary framework for collaboration with AI developers.
The Department of Justice and the Department of Health and Human Services have extended web accessibility compliance deadlines by one year to provide additional time for implementation.
The White House has proposed a national artificial intelligence framework that seeks to establish a uniform federal standard, prioritizing the preemption of state regulations while focusing on child safety, energy cost protections, and American technological competitiveness.
The Trump administration has released a new cyber strategy outlining a more assertive federal approach to cybersecurity, emphasizing coordination, deterrence, and enforcement. The president also issued a companion executive order that elevates the federal response to cybercrime and fraud through stronger coordination of government efforts, private-sector partnerships, and expanded support for state and local governments.
The Cybersecurity and Infrastructure Security Agency has announced a series of virtual town hall meetings to seek additional input on proposed regulations under the Cyber Incident Reporting for Critical Infrastructure Act.
In December 2025, President Trump issued an executive order establishing a national artificial intelligence (AI) policy framework, challenging stricter state AI laws, and tying certain federal funding to state compliance.
Richard Lucas has been appointed as the chief operating officer of the U.S. Department of Education Office of Federal Student Aid. However, specific details on the agency's plans to establish cybersecurity compliance obligations have yet to emerge.
