"This paper utilizes concepts from new institutionalism to help explain journalists’ and news organizations’ resistance to implementing security-related practices despite a deteriorating safety and security environment for journalists in the United States. Through 30 interviews with journalists, technologists, and media lawyers, I identify three main variables for the resistance to the development of newsroom security cultures, as well as a new social actor necessary for the development of security cultures in newsrooms: the “security champion.” The emergence of this new institutional entrepreneur highlights an intriguing tension. Although news organizations have engaged in slow adoption of the anonymous whistleblowing platform SecureDrop, they have not necessarily engaged in an institutionalization of security practices throughout the newsroom. The decoupling of these two factors represents attempts by news organizations to have institutional legitimacy while not changing core practices. In conjunction with this phenomenon, inspired individuals in newsrooms across the country are becoming ad hoc “security champions” in order to build security cultures from the ground up." (Abstract)