Minimum Security Standards for Networked Devices (MSSND) Home

UC Berkeley’s Minimum Security Standards identify the minimum level of protection required for devices on our campus network and devices that store, process, or access institutional information.

What's Covered under this Standard?

All devices connected to a UC Berkeley network, or storing, processing, or accessing Institutional Information, regardless of the device’s location or ownership.

Some Examples:

• Laptops, Desktops
• Personal computer connected to bSecure VPN
• Remote work systems connecting to UC Berkeley systems and data
• Tablets, phones
• Gaming systems
• Digital Streaming devices, Smart TVs
• Servers
• Printers
• Internet of Things (IoT) devices
• Etc.

What Are the Requirements?

1. Patching and Updates
2. Anti-Malware Software
3. Host-based Firewall Software
4. Use of Authentication
5. Passphrase Requirements
6. Device Lock-Out
7. Unnecessary Services
8. Remote Access Services
9. Privileged Accounts

Who Administers the MSSND?

UC Berkeley’s MSSND is issued under the authority of the Associate Vice Chancellor for Information Technology and Chief Information Officer. Questions about the Standard may be directed to the Information Security Office: security-policy@berkeley.edu.