Information Security Documents

The documents below (CalNet login required for access) are designed to support Information Security Management Program documentation at UC Berkeley. The campus-level ISMP also provides the framework for the unit-level template below. Using and following these templates helps to maintain consistency in Information Security Management documentation across campus.

If you have any questions or need assistance with the documents, please email security@berkeley.edu.

If you are looking for the Campus Incident Response Plan, please visit https://security.berkeley.edu/campus-incident-response-plan

Campus-Level Information Security Management Program (ISMP):

The Campus-Level Information Security Management Program document describes the overall Information Security Management Program for UC Berkeley. This document is intended for UC Berkeley Campus Stakeholders and informs UC Berkeley leadership about cyber-risk management, the overall Program, as well as risk acceptance.

Unit-Level Information Security Management Program Template:

The Unit-Level Information Security Management Program Template is designed to assist Units in developing a Unit security plan. The template includes all Campus-level processes and controls and has placeholders where Units can add any additional controls or mitigations in place at the Unit level. UC Berkeley members may make an editable copy of this Template.