A-Z Policy Catalog | Information Security Office

Below is an alphabetical listing of Berkeley and UC systemwide IT policies.

Policies & Standards	Related Standards, Guidelines & Procedures	Scope
Updated: Acceptable Use Policies for UC Berkeley Information Technology Resources	Administering Appropriate Use of Campus Computing and Network Services	Berkeley Campus
Application System Development Policy	Application System Development Guidelines	Berkeley Campus
CalNet Policies		Berkeley Campus
Under Review: Campus Information Technology Security Policy	UC Berkeley User Network Device Standards	Berkeley Campus
Campus Online Activities Policy	Mass Email Communication Guideline Procedures for Blocking Network Access	Berkeley Campus
Archived: Computer Use Policy Superseded by: Campus Acceptable Use Policy	Administering Appropriate Use of Campus Computing and Network Services	Berkeley Campus
Copyright Notices on Campus Websites		Berkeley Campus
Data and IT Resource Classification Overview	Updated: Data and IT Resource Classification Standard - version 2.1, updated 6/13/2024 Data and IT Resource Classification Guideline Data Classification and Protection Profiles	Berkeley Campus
Departmental Information Security Contact Policy	Highlighting Changes to the Departmental Information Security Contact Policy	Berkeley Campus
Updated: Domain Name System (DNS) Service Policy and Resources Archived: Domain Name System (DNS) Service Policy		Service
Electronic Communications Policy	Administering Appropriate Use of Campus Computing and Network Services Approval to Access Berkeley Campus Electronic Communications Accessing a former employee's email or files Guidelines for Use of Campus Network Data Reports	UC & Berkeley Campus
Email Service Policy	UC Berkeley Box and Google Data Use Agreement Cautions in the Use of Email Mass Email Communication Guideline Terms and Conditions of Appropriate Use for bMail	Service
Exception Process	Information Security Policy Exception Process Overview Full Information Security Policy Exception Process
IS-3 Electronic Information Security	UC systemwide policy UC Berkeley IS-3 Information UC Berkeley's Implementation of IS-3 Campus Information Security Management Program Campus Incident Response Plan Information Security Policy Guide for Units	UC & Berkeley Campus
IT Accessibility Policy		UC
Updated: Minimum Security Standards for Electronic Information Home Page - links to full Standard and implementation information Previous Version: Minimum Security Standards for Electronic Information	Request for Exception: Berkeley Campus Minimum Security Standards Guidelines for previous version of MSSEI: Secure Deletion Guideline Covered System Registration Guideline Registration Review Guideline Managed Software Inventory Guideline Secure Device Configuration Guideline Continuous Vulnerability Assessment & Remediation Guideline Authenticated Scans Guideline Intrusion Detection Guideline Device Physical Security Guideline Secure Coding Practice Guidelines Application Security Testing Program Commercial Software Assessment Guideline Mobile and Wireless Device Guideline Security and Privacy Training Guideline Separation of System Resources Guideline Use of Admin Accounts on Secure Devices Guideline Admin Account Security Guideline Managed Hardware Firewall Guideline Protected Subnet Guideline Audit Logging Guideline Security Audit Log Analysis Guideline Need to Know Access Control Guideline Account Monitoring and Management Guideline Data Encryption in Transit Guideline Data Encryption on Removable Media Guideline Data Access Agreement Guidelines Incident Response Planning Guideline Incident Response Plan Availability Guideline Incident Reporting Training Guideline Request for Exception: Berkeley Campus Minimum Security Standards	Berkeley Campus
Minimum Security Standards for Networked Devices Home	Minimum Security Standards for Networked Devices (MSSND) - full Standard Request for Exception: Berkeley Campus Minimum Security Standards MSSND: How to Secure Devices Guide to MSSND Changes	Berkeley Campus
Privacy Statement for UC Berkeley Websites	How to Write an Effective Website Privacy Statement	Berkeley Campus
Roles and Responsibilities Policy Home Page	Roles and Responsibilities Policy Information Security Policy Glossary	Berkeley Campus
Routine Monitoring Practices Overview	Detailed Routine Monitoring Practices (login required) Electronic Communications Policy (ECP) Guidelines for Use of Campus Network Data Reports	Berkeley Campus
Security Requirements for Networked Devices (including NAT)		Berkeley Campus
Terms and Conditions of Appropriate Use for bMail		Berkeley Campus