Cyber Risk Management Program

Program Overview

The Cyber Risk Management Program (CRMP) is a holistic initiative designed to help UC Berkeley Units manage digital risk and ensure compliance with the UC systemwide IS-3 Electronic Information Security Policy. By shifting from a purely technical checklist to a risk-based governance model, the program protects the university’s reputation, research integrity, and administrative operations.

See the list of Unit Heads, Security Leads, and Review Schedule

Key Program Principles:
Security is a shared responsibility; everyone has a role.	Focus on risk management; risk assessment is key.	Units are responsible for managing their own information security risk.	Protection Level & Availability Level inform risk level and controls.

Cyber Risk Management Checklist: see what is on the horizon and what is needed.
UISL Job Description: skills and tasks needed to perform the role.
UISL Getting Started Guide: high-level overview of tasks.
Unit Heads and Security Leads: an overview page explaining each role.

Review the Assessment Schedule.
Annually, review your registered assets in Socreg.
1. Socreg Unit Security Metrics Guide.
Review the Unit Self-Assessment & Isora GRC page.
Read the Berkeley Isora Guidance.
Log in to the Isora unit self-assessment platform.
Check out the CRMP Dashboards data visualization and reporting tool.

Cyber Risk Management Program

Program Overview

Get Help

Key Program Principles:

Security is a shared responsibility; everyone has a role.

Focus on risk management; risk assessment is key.

Units are responsible for managing their own information security risk.

Protection Level & Availability Level inform risk level and controls.

UISL Resources:

Assessment Cycle:

Compliance Tools: