Cyber Risk Management Program

The Cyber Risk Management Program (CRMP) is a holistic initiative designed to help UC Berkeley Units manage digital risk and ensure compliance with the UC systemwide IS-3 Electronic Information Security Policy. By shifting from a purely technical checklist to a risk-based governance model, the program protects the university’s reputation, research integrity, and administrative operations.

• See the list of CRMP Unit Heads, Security Leads, and Review Schedule

Key Program Principles: 

• Security is a shared responsibility; everyone has a role. 
• Focus on risk management; risk assessment is key. 
• Units are responsible for managing their own information security risk. 
• Protection Level & Availability Level inform risk level and controls.