UC Santa CruzInformation Technology Services

Security Architecture Project

Project Contact:
Steve Zenone 9-5408

General Overview

Ensuring appropriate IT security measures to support business processes and to protect information assets is critical to the reliable functioning of UCSC. A strong security infrastructure protects information assets at risk from potential threats that range from employee error to malicious or criminal use of computing resources, system failure, and natural disasters. Such events could result in damage to, or loss of information resources, corruption or loss of data integrity, interruption of the activities of the University, or compromise to the privacy of members of the University community. Security infrastructure includes centralized services, but also depends on education and awareness in the campus community for its effectiveness.

Purpose

UCSC's IT infrastructure is currently exposed and is facing increasing levels of attacks. As the level of exposure increases so does the level of risk. The goal of the Security Architecture project is to design and implement IT security controls that will significantly reduce UCSC's IT Infrastructure's exposure and risk. Policies and guidelines provided by the Security Assessment project will influence the decisions made by the Security Architecture project.

Scope

Three phases comprise the initial stage of the Security Architecture:

  1. Define process
  2. Run first iteration/audit against current environment
  3. Address top tier vulnerability
The customers and system users for this project include
  • Campus Community
  • Network Teams
  • Service Delivery Teams
  • Audit
  • Campus Security

 

 

 

 

 

 

 

 

 

 

.