IS-3

Welcome to UC Berkeley’s Cyber Risk Management Program (CRMP) home page. Berkeley’s Cyber Risk Management Program is a holistic program to help Units manage cyber risk as well as compliance with IS-3, UC's systemwide electronic information security policy.

Here you will find information and resources to help your Unit with its ongoing cyber risk management and annual CRMP review.

Jump to: Key Program Principles |...

UC Business and Finance Bulletin IS-3 is the University of California’s systemwide information security policy. The policy and related standards are available on the UC Systemwide Information Security website.

IS-3 establishes how information security risk is handled within the university. Foundational elements include:

The update of UC's Electronic Information Security Policy, IS-3, in 2018 brought changes to the way information security risk is managed at UC, and here at Berkeley. This project was designed to integrate IS-3's requirements and principles into Berkeley's existing information security program in a way that aligned with core campus priorities and values. Its goal was to help ensure that risk is understood and addressed at the appropriate organizational levels, and includeed updating the fundamentals of the campus’ security program to current UC and...

Secure access management is essential for protecting sensitive data and systems. It ensures that only authorized users have the right level of access, reducing the risk of data breaches, insider threats, and operational disruptions. Learn how to improve managing access to your system with these tips and resources.

Effective user access management is crucial for maintaining security and operational efficiency within an organization. Including user access management within an onboarding/offboarding process can help streamline access for new hires...