Events

EDUCAUSE Cybersecurity and Privacy Professionals Conference (CPPC)

Anaheim, CA

Preconference Workshop:

Safeguards in Action: A Practical Roadmap for GLBA Compliance, Risk, and Communication

April 28, 2026 | 8:00 a.m. – 4:00 p.m. PT

This full-day, hands-on workshop will focus on all three pillars of GLBA: Safeguards, Privacy, and Pretexting. bringing together cybersecurity and privacy professionals to collaborate on practical solutions that strengthen compliance and protect institutional data. Attendees will use worksheets and templates to inventory what already exists, identify essential stakeholders, and map responsibilities. We will compare risk assessment methodologies and demonstrate how to leverage existing practices (e.g., FERPA processes, audit cycles, HECVAT/vendor reviews) without duplicating efforts.

Speakers:

• Elizabeth Cole-Walker, Information Security Specialist, North Carolina State University
• Wendy Epley, Principal Analyst, Information Security GRC, The University of Arizona
• Anne Koors, Lead Security Analyst, Northeast Wisconsin Technical College
• Tim Schwab, Chief Information Security Officer, The University of Arizona
• Jason Klinger, Security Advisor, CampusGuard
• Greg Lewis, Security Advisor, CampusGuard

Register

Three Universities, Three Approaches to Reach the Same Goal: Building a Unified IT Policy Framework

Thursday, April 30, 2026 | 2:15–3:00 p.m.

Speakers:

• Shawn Kim, Director of GRC, Stanford University
• Robert Oxender, Director, Information Assurance, Purdue University
• Doug Lomsdalen, IT Security Consultant, CampusGuard

Learn More

TPA 2026

Hyatt Regency Savannah in Savannah, Georgia

Rethinking the PCI Attestation Cycle for Merchant Success
May 4 | 2:45 – 3:45 p.m.

Speakers:

• Matt Schafer, Director, Treasury Operations, Indiana University
• Laura Allison, Project Management Product Lead, CampusGuard

PCI attestation is a critical component of maintaining compliance and protecting payment data, but how often should you do it? This session explores two approaches: Indiana University’s monthly attestation cycle, designed to reduce the level of effort, accommodate merchant busy seasons, and improve focus, and the traditional annual cycle favored for simplicity. Learn the pros and cons of each, hear real-world lessons, and walk away with practical strategies to optimize your attestation process for your organization’s unique needs.

From Checkout to Compromise: Guarding Higher Ed Against E-Skimming Threats
May 5 | 8:15 – 9:15 a.m.

Speakers:

• Kevin Doar, Director, Office of Merchant Services, University of Washington
• David Gundrum, JD, CISA, CISSP, QSA, Senior Security Advisor, CampusGuard

As colleges and universities expand their digital payment experiences, the risks associated with e-skimming attacks continue to rise. Cybercriminals are increasingly targeting higher ed websites with malicious scripts designed to silently capture payment card data, putting students, families, and institutions at significant financial and reputational risk. This session explores the vulnerabilities and tactics attackers use to bypass common security controls, how UW evaluated, implemented, and optimized one solution to secure its payment ecosystem, and recommended incident-response actions when a compromise occurs.

View the agenda