SUBJECT:

Electronic Information Security Policies

As you probably know, the issues of information privacy and security continue to be a global and local challenge as the amount of digital information grows and as hackers keep on improving their malicious techniques. Although we continue to improve our detection and prevention technologies, we cannot assure sufficient protection without the help and support of each one of you.

To that end, we would like to make you aware of several new policies and guidelines that will help you be better prepared to protect university and personal data. These include:

- Updated UCSD Network Security policy and minimum network standards http://adminrecords.ucsd.edu/ppm/docs/135-3.html

- Newly revised UC policies:
http://www.ucop.edu/irc/itsec/uc/mgt_guide/selbullres.html

* IS-2: Inventory, Classification, & Release of Electronic Information

* IS-3: Electronic Information Security

* IS-11: Identity and Access Management

* IS-12: Continuity Planning and Disaster Recovery

These policies and guidelines apply to all activities in support of the University's mission and all members of the UCSD community are expected to understand and support them. In particular, each one of us is obligated to respect and protect private information and we are all responsible for the protection of information under our control.

We urge you to review the provided materials, identify ways by which you can enhance the security of information to which you have access, and encourage others to do the same. If you have questions or need additional information please contact Gabriel Lawrence, UCSD IT Security Director, at: glawrence@ucsd.edu.

Elazar Harel Assistant Vice Chancellor - Administrative Computing & Telecommunications Ed Babakanian Chief Information Officer - Medical Center