Cyber Risk Management Program Annual Themes

Overview

Each year, we will spotlight a different cyber risk area, offering tools and resources to help units enhance cybersecurity and compliance. Each theme aims to provide clear, actionable guidance to improve security posture and raise awareness.

  • A key risk area relating to information security policy and cyber risk.
  • The risks and policy requirements the theme helps the unit address.
  • Information and actual tools, such as services or templates, to help units make progress and increase awareness in that area.

Patch Management

Patch management has remained a persistent challenge, especially now in the evolving patch management threat landscape. Specific risks arise from AI-accelerated vulnerability exploitation. This toolkit provides a practical, flexible starter kit to help units strengthen and streamline patch management processes.

Secure Access Management

Secure access management is essential for protecting sensitive data and systems. It ensures that only authorized users have the right level of access, reducing the risk of data breaches, insider threats, and operational disruptions.

Workstation Encryption

Millions of laptops are reported stolen yearly in the U.S., and thousands are misplaced or lost. UC Berkeley is no exception. One of the best and easiest ways to protect the data on your computer is to encrypt it. Encryption makes the data on your computer unreadable if it is lost, stolen, or confiscated.