|
|
|
|
Security InformationSecurity AwarenessSecurity Resources© 2009 The Regents of the University of California.
|
|
| IT Policy Changes Home IT Policy Record of Changes UCSC Password Strength and Security Standards - update 10/22/09 UCSC Password Strength and Security Standards The primary purpose of this update was to clarify that "password vault-type" tools are acceptable for securely storing passwords, including passwords that provide access to restricted data. The update also clarifies that, per UCSC's Password Policy, these Standards are requirements for passwords that provide access to University restricted data, or where otherwise required by law, UC or campus policy, or contract. UCSC Minimum Network Connectivity Requirements Policy UCSC's Minimum Network Connectivity Requirements Policy identifies minimum security requirements for devices connected to the campus network. It also applies to other devices used for University business purposes, regardless of ownership or location. This policy brings a number of already-existing UC requirements to UCSC at a local level. It identifies security requirements for devices connecting to UCSC’s network and specifies that devices not meeting these requirements may be blocked or disconnected from the campus network according to our existing procedures. These requirements represent common security best practices and generally are not unique to UCSC. The Minimum Network Connectivity Requirements address the following topics:
Information designed to help people understand and meet these requirements is available at http://its.ucsc.edu/security_awareness/minreqmain.php. This policy also includes a mechanism for obtaining exceptions; however, exceptions are not automatic, and special security protections may be required for exceptions to be granted. ------------- If you have questions about the Minimum Network Connectivity Requirements Policy, please submit an IT Request ticket or contact the ITS Support Center at help@ucsc.edu, 459-HELP (4357), or in-person M-F 8AM-5PM Room 54 Kerr Hall. UCSC Acceptable Use Policy UCSC's Policies for use of UCSC computing facilities, also known as our Acceptable Use Policy, were updated in November 2008. This policy identifies acceptable and unacceptable behavior when using campus computing resources. The primary function of this update was to
Key unacceptable behaviors to be aware of include copyright and other intellectual property violations, harassment, inappropriate personal use of resources, inappropriately implying University representation or endorsement, and sending spam. If you have questions about the Acceptable Use Policy, please submit an IT Request ticket or contact the ITS Support Center at help@ucsc.edu, 459-HELP (4357), or in-person M-F 8AM-5PM Room 54 Kerr Hall. UCSC Implementation Plan for Protection of Electronic Restricted Data This Implementation Plan outlines procedures relating to information security breaches and management of restricted data. The update revises campus security breach procedures to more accurately reflect actual procedures, and clarifies responsibilities and resources for protecting restricted data. It also incorporates requirements from UC policy for data inventory and incident response planning and notification. Changes will primarily affect those with specific responsibilities for security incident response, and those directly responsible for managing our campus inventory of personal identity information (PII). For all others, this update provides an opportunity to review some important information regarding the protection of restricted data and what to do in the case of a suspected information security breach: Protecting Restricted Data: Information Security Breaches: Suspected security breaches should be reported to your supervisor and the ITS Support Center (contact info below). If theft of UCSC-related computing equipment is involved, also file a report with the UCSC Police Department, and with local authorities if the theft occurred away from campus. ------------- If you have questions regarding this Implementation Plan, please submit an IT Request ticket or contact the ITS Support Center at help@ucsc.edu, 459-HELP (4357), or in-person M-F 8AM-5PM Room 54 Kerr Hall. UCSC Password Policy The primary purpose of this update was to clarify when passwords must comply with the campus Password Standards. This is not a change in scope or requirements, but instead is an attempt to simplify the original policy language, which was somewhat difficult to dissect, and leverage UC vocabulary that has been standardized since the original policy was adopted.
Please contact the ITS Support Center for technical assistance with passwords or other technical help by submitting an IT Request ticket, by email at help@ucsc.edu, telephone at 459-HELP (4357), or in-person at Kerr Hall Room 54. Please direct questions about UCSC’s Password Policy or Standards to the ITS Support Center (contact info above). Additional Resources: UCSC HIPAA Policy, Content changes:
Administrative changes:
|
