A-Z Policy Catalog | Information Security Office

Below is an alphabetical listing of Berkeley and UC systemwide IT policies.

Policies & Standards	Related Standards, Guidelines & Procedures	Scope
Acceptable Use Policies for UC Berkeley Information Technology Resources		Berkeley Campus
Application System Development Policy	Application System Development Guidelines	Berkeley Campus
CalNet Policies		Berkeley Campus
Campus Information Technology Security Policy	UC Berkeley User Network Device Standards	Berkeley Campus
Campus Online Activities Policy	Mass Email Communication Guideline Procedures for Blocking Network Access	Berkeley Campus
Computer Use Policy	Administering Appropriate Use of Campus Computing and Network Services	Berkeley Campus
Copyright Notices on Campus Websites		Berkeley Campus
Data and IT Resource Classification Standard - version 2.1, updated 6/13/2024 Data Classification Standard - version 1, Archived	Data and IT Resource Classification Guideline Data Classification and Protection Profiles Data Classification Guideline - Archived	Berkeley Campus
Updated: Departmental Information Security Contact Policy	Highlighting Changes to the Departmental Information Security Contact Policy	Berkeley Campus
Updated: Domain Name System (DNS) Service Policy and Resources Domain Name System (DNS) Service Policy - Archived		Service
Electronic Communications Policy	Administering Appropriate Use of Campus Computing and Network Services Approval to Access Berkeley Campus Electronic Communications Accessing a former employee's email or files	UC & Berkeley Campus
Email Service Policy	UC Berkeley Box and Google Data Use Agreement Cautions in the Use of Email Mass Email Communication Guideline Terms and Conditions of Appropriate Use for bMail	Service
IS-3 Electronic Information Security	UC systemwide policy UC Berkeley IS-3 Information UC Berkeley's Implementation of IS-3 Campus Information Security Management Program Information Security Policy Guide for Units	UC & Berkeley Campus
IT Accessibility Policy		UC
Updated: Minimum Security Standards for Electronic Information Home Page - links to full Standard and implementation information Previous Version: Minimum Security Standards for Electronic Information	Secure Deletion Guideline Covered System Registration Guideline Registration Review Guideline Managed Software Inventory Guideline Secure Device Configuration Guideline Continuous Vulnerability Assessment & Remediation Guideline Authenticated Scans Guideline Intrusion Detection Guideline Device Physical Security Guideline Secure Coding Practice Guidelines Application Security Testing Program Commercial Software Assessment Guideline Mobile and Wireless Device Guideline Security and Privacy Training Guideline Separation of System Resources Guideline Use of Admin Accounts on Secure Devices Guideline Admin Account Security Guideline Managed Hardware Firewall Guideline Protected Subnet Guideline Audit Logging Guideline Security Audit Log Analysis Guideline Need to Know Access Control Guideline Account Monitoring and Management Guideline Data Encryption in Transit Guideline Data Encryption on Removable Media Guideline Data Access Agreement Guidelines Incident Response Planning Guideline Incident Response Plan Availability Guideline Incident Reporting Training Guideline Request for Exception: Berkeley Campus Minimum Security Standards	Berkeley Campus
Minimum Security Standards for Networked Devices Home	Minimum Security Standards for Networked Devices (MSSND) Request for Exception: Berkeley Campus Minimum Security Standards MSSND: How to Secure Devices Guide to MSSND Changes	Berkeley Campus
Privacy Statement for UC Berkeley Websites	How to Write an Effective Website Privacy Statement	Berkeley Campus
Protection of Computerized Personal Information	Guidelines for Use of Campus Network Data Reports Request for Exception: Berkeley Campus Minimum Security Standards Notice Triggering Data Review Requirement Campus Incident Response Plan	Berkeley Campus
Roles and Responsibilities Policy Home	Roles and Responsibilities Policy Information Security Policy Glossary	Berkeley Campus
Routine Network Monitoring Policy	Electronic Communications Policy (ECP)	Berkeley Campus
Updated: Security Requirements for Networked Devices (including NAT) Archived: Security Policy for NAT Devices	Archived: NAT Policy Compliance Guidelines	Berkeley Campus
Terms and Conditions of Appropriate Use for bMail		Berkeley Campus