Presentation is loading. Please wait.

Presentation is loading. Please wait.

Security and Privacy Policy The World Has Changed! Common Solutions Group Jack McCredie January 9, 2004.

Published byMarjory Flynn Modified over 9 years ago

Similar presentations

Presentation on theme: "Security and Privacy Policy The World Has Changed! Common Solutions Group Jack McCredie January 9, 2004."— Presentation transcript:

1

2 Security and Privacy Policy The World Has Changed! Common Solutions Group Jack McCredie January 9, 2004

3 Agenda Share Progress & Request Help Security and privacy policy framework at UC Recommended policy structure & process Specter of emerging legislation - Illustration: CA SB-1386 Security policy evolution at UC Berkeley - Illustration: minimum security standards policy Request for help – are we nuts?

4 Recommended structure Purpose Scope Policy Roles and responsibilities Consequences Requests for exception Appendices that can be easily modified Set of standing committees to contribute and review, and approve Communicate, communicate, communicate

5 University-wide policies Campus-wide policies Information technology policies Security & Privacy Policies

6 System & campus-wide policies UC Electronic Communications Policy http://www.ucop.edu/ucophome/policies/ec/html/ UC Business and Finance Bulletin IS-3 http://www.ucop.edu/ucophome/policies/bfb/bfbis.html Guide to Administrative Responsibilities http://controller-fs.vcbf.berkeley.edu/TableofContents. html

7 Information Technology Policies Requirements for Protection of Computerized Personal Information (Implementation of SB 1386) http://socrates.berkeley.edu:7015/protected.data.html Guide to Selected Privacy and Confidentiality Regulations http://socrates.berkeley.edu:7015/privacy/guidelines.html Guidelines for Use of Campus Network Data Reports http://security.berkeley.edu:2002/CISC/gdlns.net.data.html

8 Security and Privacy Policies Campus Information Technology Security Policy http://socrates.berkeley.edu:2002/IT.sec.policy.html Minimum Security Standards http://socrates.berkeley.edu:2002/MinStds/policy.htm SNS Scanning of the UC Berkeley Campus Network http://sec-info.berkeley.edu/cgi-bin/scaninfo-login.pl/

9 Security and Privacy Policies Departmental Security Contact Policy http://socrates.berkeley.edu:2002/contacts.html Guidelines and Procedures for Blocking Network Access http://socrates.berkeley.edu:2002/blocking.html IT Security “Best Practices” http://socrates.berkeley.edu:2002/bestpractices.html

10 Specter of emerging legislation Illustrative law: California SB 1386 UC Berkeley incidents since July 1, 2003 Campus and system-wide response

11 Policy Evolution: Have we gone over the top? UC electronic communications policy Departmental security contact Guidelines and procedures for blocking network access Campus IT security policy Requirements for protection of computerized personal information SNS Scanning of the UCB campus network Required minimum security standards

12 Software patch updates Anti-virus software Passwords No unencrypted authentication No unauthenticated email relays No unauthenticated proxy servers Physical security Unnecessary services HOST-BASED FIREWALL SOFTWARE REQUIRED

13 Are We Nuts? Questions and discussion

Download ppt "Security and Privacy Policy The World Has Changed! Common Solutions Group Jack McCredie January 9, 2004."

Similar presentations

Credit Card Data Security Compliance Achieving PCI Compliance July 2009 Kim Ray Billing and Payment Services Campus Credit Card Coordinator Karen Eft IT.

Credit Card Data Security Compliance Achieving PCI Compliance July 2009 Kim Ray Billing and Payment Services Campus Credit Card Coordinator Karen Eft IT.
Darton College Information Systems Use Policies. Introduction Dartons Information Systems are critical resources. The Information Systems Use Policies.

Darton College Information Systems Use Policies. Introduction Dartons Information Systems are critical resources. The Information Systems Use Policies.
CAMP Med Building a Health Information Infrastructure to Support HIPAA Rick Konopacki, MSBME HIPAA Security Coordinator University of Wisconsin-Madison.

CAMP Med Building a Health Information Infrastructure to Support HIPAA Rick Konopacki, MSBME HIPAA Security Coordinator University of Wisconsin-Madison.
Computers, Freedom and Privacy April 23, 2004 Identity Theft: Addressing the Problem in California Joanne McNabb, Chief CA Office of Privacy Protection.

Computers, Freedom and Privacy April 23, 2004 Identity Theft: Addressing the Problem in California Joanne McNabb, Chief CA Office of Privacy Protection.
Guide to Massachusetts Data Privacy Laws & Steps you can take towards Compliance.

Guide to Massachusetts Data Privacy Laws & Steps you can take towards Compliance.
Security Controls – What Works

Security Controls – What Works
CNI Fall 1998 Access Management Requirements and Approaches Joan Gargano California Digital Library

CNI Fall 1998 Access Management Requirements and Approaches Joan Gargano California Digital Library
6/4/2015National Digital Certification Agency1 Security Engineering and PKI Applications in Modern Enterprises Mohamed HAMDI National.

6/4/2015National Digital Certification Agency1 Security Engineering and PKI Applications in Modern Enterprises Mohamed HAMDI National.
Chapter 7 HARDENING SERVERS.

Chapter 7 HARDENING SERVERS.
August 9, 2005 UCCSC -- 2005 IT Security at the University of California A New Initiative Jacqueline Craig. Director of Policy Information Resources and.

August 9, 2005 UCCSC IT Security at the University of California A New Initiative Jacqueline Craig. Director of Policy Information Resources and.
Cybersecurity Summit 2004 Andrea Norris Deputy Chief Information Officer/ Director of Division of Information Systems.

Cybersecurity Summit 2004 Andrea Norris Deputy Chief Information Officer/ Director of Division of Information Systems.
University of California, Davis1 Draft Wireless Network Policy Administrative Computing Coordinating Council September 10, 2001.

University of California, Davis1 Draft Wireless Network Policy Administrative Computing Coordinating Council September 10, 2001.
PeoplePay Project Financial UL Meeting October 17, 2007.

PeoplePay Project Financial UL Meeting October 17, 2007.
ITS Offsite Workshop 2002 PolyU IT Security Policy PolyU IT/Computer Systems Security Policy (SSP) By Ken Chung Senior Computing Officer Information Technology.

ITS Offsite Workshop 2002 PolyU IT Security Policy PolyU IT/Computer Systems Security Policy (SSP) By Ken Chung Senior Computing Officer Information Technology.
SIRT Contact Orientation Security Incident Response Team Departmental Security Contacts April 16, 2004.

SIRT Contact Orientation Security Incident Response Team Departmental Security Contacts April 16, 2004.
Payment Card Industry (PCI) Data Security Standard

Payment Card Industry (PCI) Data Security Standard
Information Technology Audit Process Business Practices Seminar Paul Toffenetti, CISA Internal Audit 29 February 2008.

Information Technology Audit Process Business Practices Seminar Paul Toffenetti, CISA Internal Audit 29 February 2008.
Copyright © Center for Systems Security and Information Assurance Lesson Eight Security Management.

Copyright © Center for Systems Security and Information Assurance Lesson Eight Security Management.
Security Standards in Higher Education Presented by: Karen Eft, IT Policy Manager University of California, Berkeley Robert Ono, IT Security Coordinator.

Security Standards in Higher Education Presented by: Karen Eft, IT Policy Manager University of California, Berkeley Robert Ono, IT Security Coordinator.
Information Resources and Communications University of California, Office of the President System-Wide Strategies for Achieving IT Security at the University.

Information Resources and Communications University of California, Office of the President System-Wide Strategies for Achieving IT Security at the University.

Similar presentations

Ads by Google