Security At ANR
Welcome to the Information Security resource center for ANR! Please take a bit of time to explore the resources and discussions here as everyone depends on Security Leads to extend Information Security into each unit.
Background
Why Is This Important?
In order for our users to do their job efficiently and effectively, they must be able to rely on their devices and systems being secure. Security Leads will be in the best possible position to foster this environment.
Where Do I Go Now?
The Security Lead will be tasked with various responsibilities such as maintaining an inventory of applications/assets; implementing security controls; reviewing and updating risk assessment and treatment plans; devising procedures for proper handling, storage, disposal of electronic media; and reviewing access rights. Please feel free to use this board to communicate and collaborate with other Security Leads as well as check existing resources related to the policy. Here's a list of resources to get you started:
- Application Inventory Discussion: https://ucanr.edu/collaborate/posts_reader.cfm?threadnum=90478&cluster=11318
- Asset Inventory Discussion: https://ucanr.edu/collaborate/posts_reader.cfm?threadnum=90480&cluster=11318
- Incident Response Plan Disucssion: https://ucanr.edu/collaborate/posts_reader.cfm?threadnum=90479&cluster=11318
Report an Incident
Please visit the Incident Report page to get started: https://ucanr.edu/p/65528.
In addition to the steps on that page, If an incident or violation occurs, it needs to be reported to the Unit Head. If the incident involves information classified at Protection Level 3 or above, it needs to be reported to the CISO.
Resources
- BFB-IS-3 Policy: https://policy.ucop.edu/doc/7000543/BFB-IS-3
- Official Blog Post: https://cio.ucop.edu/uc-adopts-a-new-information-security-policy/
IT News
-
Transitioning away from the ANR FAQ system
We plan to retire the FAQ system (https://ucanr.edu/faqs/) in February 2020, in order to refocus the efforts of the ANR Web Services team. This system is infrequently used, and FAQ pages appearing in SiteBuilder can easily be replicated by text or...
-
PDF Conversions and SiteBuilder
As part of our on-going effort to improve SiteBuilder efficiency and security, UC ANR IT is removing the PDF conversion tool from SiteBuilder. Unlike when SiteBuilder was first released, creating PDFs from documents, spreadsheets and presentations is...
-
Accessibility Scores Available In Site Builder
You may have noticed a new notification when you first login to edit your site in Site Builder. In an effort to improve Electronic Accessibility at ANR, all sites that have switched over to the modern theme in Site Builder were automatically added to...