NSF’s new Research Terms and Conditions (effective March 1, 2018) require recipients of NSF funding to protect Personally Identifiable Information within the scope of an NSF award. Article 35 states:
Announcements
July 12, 2018
July 9, 2018
The Campus Policy for Minimum Security Standards for Electronic Information (MSSEI) [1] requires departments to register computer systems and applications containing restricted data. Restricted Data is defined as "any confidential or personal information that is protected by law or policy, and that requires the highest level of access control and security protections whether in storage or in transit" [2] and further refined based on adverse business impact into "High" or Protection Level 2 and "Moderate" or Protection Level 1. [3]
June 12, 2018
In the last few months our office has received an increasing number of laptop theft reports. These incidents occurred both on and off campus, and in varying circumstances, however in all the recent cases the laptops involved were not configured for Full Disk Encryption (FDE). In a few of these cases, the laptops were used to access sensitive data as part of campus business processes, and the Security team is concerned about possible data exposure due to lost and stolen devices with access to campus protected data.
January 19, 2018
The Internal Revenue Service has reported a big spike in phishing and malware incidents during the 2016 and 2017 tax seasons.
May 3, 2017
January 24, 2017
As tax season begins, W-2 wage statements have already begun to be made available online this week. Last year, several convincing phishing messages were crafted by tax scammers and sent to Campus to trick victims into divulging personal information for criminal purposes.
These fraudsters use your stolen credentials and tax documents to commit identity theft, and file a fraudulent tax return with the IRS in order to collect a refund using your identity.
January 20, 2017
Campus printers have received unwanted printouts in recent weeks. Report any unwanted printouts to CSS-IT and Information Security and Policy.
October 5, 2016
October is National Cyber Security Awareness Month (NCSAM), an annual campaign to raise awareness about cyber security. The NCSAM is designed to engage and educate by providing tools and resources to stay safe online, with the goal of increasing resiliency in the event of a cyber incident.
May 17, 2016
The US-CERT (US Computer Emergency Readiness Team) has issued a recent alert concerning ransomware. Ransomware is a type of malicious software that infects a computer and restricts users’ access to it until a ransom is paid to unlock it. The alert warns that in early 2016, destructive ransomware variants such as
May 10, 2016
ISP has enabled Google Analytics so that we can better learn how people use our website. As a result, our privacy policy has been updated.
February 8, 2016
As the 2015 tax deadline approaches, tax scams are ratcheting up. The IRS has reported an increase in tax scams, especially by phone. Some of the most common scams involve con-artists who pretend to be from the IRS and call victims telling them they have to pay right now, or else.
Don't believe it - the IRS has formal processes in place for people with tax issues, and angry harassing calls like these are not how the IRS does business. The IRS will NEVER:
November 3, 2015
As part of a UC system-wide effort to address the increasing threats to the security of our information systems and data, a comprehensive security awareness training program is being rolled out by UCOP for all staff and faculty.
October 1, 2015
You may have noticed changes to the Information Security and Policy website beginning October 1st!
We've migrated our site to the Open Berkeley platform. The new site includes:
September 22, 2015
On October 20th, 2015, the CalNet login page will undergo important cosmetic and security changes. Read the announcement and preview the new look before the change!
June 1, 2015
Effective July 14th, 2015 Microsoft is discontinuing extended support for its Windows Server 2003 operating system. Please read our bulletin to prevent your Windows Server 2003 systems from being blocked on campus networks.
May 8, 2015
Learn how to detect the authentic CalNet login page and avoid entering your CalNet credentials on bogus web sites!
March 12, 2015
Alex Stamos, Yahoo’s Vice President of Information Security and Chief Information Security Officer, will present "Ethics and Opportunities in Cybersecurity" at Banatao Auditorium (Room 310), in Sutardja Dai Hall (the CITRIS building) on Monday, March 30, 2015 at 10:30am. Register now!
November 19, 2014
Beginning this December, Information Security and Policy will launch the SANS Securing the Human Phishing project. Approximately each month for one year we will send out a simulated phishing email that looks and smells like a real phish.
August 22, 2014
Charlie Miller, of the Application Security Team at Twitter, will present "Failures of the InfoSec Community" and "Getting Owned in 100 Different Ways" at Booth Auditorium, Boalt Hall, on October 17, 2014. Register now!
July 1, 2014
On September 30, 2014, all UCB campus Symantec Endpoint Protection (SEP) licenses will expire, and SEP client security software must be removed from campus systems by October 1, 2014.