Key Staff Responsibilities

Role:

Responsibilities:

All staff members, including student staff and volunteers 

Policy roles:

• “User”

• "Workforce Member”

• Classify your data and systems
• Practice good cyber hygiene: 
  • Keep your devices and applications patched and up to date
  • Use strong, unique passphrases -- make them long, complex, or both. UC Berkeley has free LastPass Premium for all current students, faculty, and staff!
  • Secure all devices with a strong password or PIN, and set them to lock after a few minutes of inactivity (15 min max, shorter is better)
  • Encrypt anything that stores sensitive information
  • Turn on built-in anti-malware software and firewall
  • Back up important files and data
• Use separate accounts for privileged (administrator) and non-privileged (user) access
• If you’re working with information or systems classified at Protection Level P3 or P4 or Availability Level A3 or A4, you’ll need additional controls. Work with IT to develop a plan.
• Complete required cybersecurity training

Report security incidents and respond to security notices

Managers/supervisors of other people’s work or research

(“Workforce Manager” role)

• Ensure that everyone you manage/supervise understands their information security responsibilities and receives proper security training
• Review access rights annually
• Incorporate information security into processes for hiring, separation, and change of employment

Additional roles that staff may fill

See the policy for responsibilities and more complete definitions. Contact security-policy@berkeley.edu for assistance with these roles.

• Proprietor: Person with institutional-level responsibility for a set of information or an IT Resource
• Unit Head: Executive with the authority and resources to accept a Unit’s information security risk
• Unit Information Security Lead (UISL): Responsible for ensuring execution of information security activities within the Unit. Designated by the Unit Head; does not need to be a technical person
• Service Provider: Provides an IT service to their Unit or other Campus Units