Information Technology

Campus Information Technology Security Policy

In order to fulfill its mission of teaching, research, and public service, the campus is committed to providing a secure yet open network that protects the integrity and confidentiality of information while maintaining its accessibility. Each member of the campus community is responsible for the security and protection of electronic information resources over which they have control. Resources to be protected include networks, computers, software, and data. The physical and logical integrity of these resources must be protected against threats such as unauthorized intrusions, malicious misuse, or inadvertent compromise. Activities outsourced to off-campus entities must comply with the same or equivalent security requirements as in-house activities.

Email Service Policy

Campus Email Service supplies email and mailing list services in support of the University's mission of education, research and public service and to conduct the University's business. Access to and use of Campus Email Service is a privilege accorded at the discretion of the University. Use of campus email service is subject to legal and policy restrictions that apply to all University property and by constraints necessary for the reliable operation of electronic communication systems and services. The Berkeley Campus reserves the right to deny access to use campus email service when necessary to satisfy these restrictions and constraints.

Redelegation to Associate Vice Chancellor - Information Systems and Technology (2003)

Brief description of redelegated authority:

Serve as Berkeley campus Electronic Resource Security Guidelines Coordinator

Date: 3/26/2003 Delegated from: Chancellor Delegated to: Associate Vice Chancellor - Information Systems and Technology Can redelegate? Yes Original document source: BFB-IS-3_chancellor-to-AVC.IST_30840457_accessible.pdf

Domain Name System (DNS) Service Policy and Resources

The purpose of this policy is to define the terms under which the Domain Name System (DNS) is operated and maintained while also ensuring that the requirements of stakeholder groups are met. This policy is intended to ensure that the University utilizes limited DNS resources appropriately, that the University’s name and brand is protected, that security and legal risks are mitigated, and that DNS resources are allocated to the campus community appropriately.

Administering Appropriate Use of Campus Computing and Network Services

These Guidelines are intended to assist Berkeley Campus departments or units to ensure appropriate use of their computing and network services and to respond correctly to allegations of misuse. Berkeley Campus departments or units may choose to provide or not provide computing and network services to defined categories of users, and may limit the types of services they do choose to provide. These decisions are based upon consideration of campus or local department or unit missions, available resources, or other academic or business needs and priorities. Berkeley Campus departments or units who do provide computing and network services (hereinafter referred to as "Providers") must ensure that their services are administered in compliance with any applicable regulations and principles. To this end, they must keep themselves informed regarding current regulations and practices, consulting with campus authorities or documentation resources as required. Since the Campus may be viewed as one legal entity, actions taken by Providers in response to allegations of misuse must be as consistent as possible for similar situations, both within a particular department or unit as well as in comparison to others on campus. To help Providers meet this requirement, various campus resource offices are available for consultation and/or referral for action.

Departmental Information Security Contact Policy

This Policy establishes responsibilities of Departments and Information Security Contacts in order to ensure that the UC Berkeley Information Security Office (ISO) is able to contact departments in the event of a security incident. The ability to quickly contact responsible personnel and have them take appropriate action is critical in mitigating the negative effects of an incident.

Copyright Notices on Campus Websites

Although a notice is not legally required to assert copyright on works published on and after March 1, 1989, displaying a copyright notice on websites is still a very good idea. A notice clarifies who owns the work, emphasizes that the owner asserts copyright, and encourages contact by those who wish to use the material. If any legal disputes arise, a posted notice may help defend against claims of "innocent infringement".

BFB-IS-3: Electronic Information Security (2019)

Brief description of delegated authority: appoint responsible parties to implement the IS-3 policy for the Berkeley campus Date: 10/25/2019 Delegated from: Chief Information Officer and Vice President - Information Technology Services, Office of the President Delegated to: Chancellor Can redelegate? Yes Original document source: https://policy.ucop.edu/doc/7000543/BFB-IS-3