{"id":567,"date":"2022-10-19T18:35:29","date_gmt":"2022-10-20T01:35:29","guid":{"rendered":"https:\/\/sites.oit.uci.edu\/infosec\/?page_id=567"},"modified":"2025-12-19T17:53:18","modified_gmt":"2025-12-20T01:53:18","slug":"program","status":"publish","type":"page","link":"https:\/\/www.security.uci.edu\/program\/","title":{"rendered":"UCI Information Security Management Program"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_row _builder_version=”4.27.4″ _module_preset=”default”][et_pb_column _builder_version=”4.27.4″ _module_preset=”default” type=”4_4″][et_pb_button button_text=”View UCI Campus ISMP Document” _builder_version=”4.27.4″ _module_preset=”default” button_url=”https:\/\/ucirvine.sharepoint.com\/:b:\/s\/OIT-Security-Team\/IQAM91yGaqenT5hPLnV-gkWCAfJZFh51yiTZkXK36RpQCp0?e=RuFbPC” hover_enabled=”0″ sticky_enabled=”0″ button_alignment=”center”][\/et_pb_button][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.18.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][et_pb_column type=”4_4″ _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.23.4″ _module_preset=”default” global_colors_info=”{}”]The mission<\/strong> of the information security management program is to ensure the confidentiality<\/em>, integrity<\/em>, and availability<\/em> of institutional information and IT resources at UC Irvine.<\/p>\n

The University campus is a unique environment<\/strong> to secure. Balancing the need to protect high risk information, important research, and critical infrastructure, in an open environment the size of a small city, while maintaining academic freedom and autonomy privacy.<\/p>\n

To achieve the mission, we recognize that information security is a shared responsibility<\/strong>. Every member of the University has a unique role and responsibility<\/a>. Leading this effort, the CISO<\/a> works with Units<\/a> across campus to reduce cybersecurity risk.<\/p>\n

The UC Irvine program aligns with University of California system-wide information security policies & standards<\/a> as well as localized specific standards and augmented policies. The program takes a risk-based approach<\/strong>, starting with asset classification<\/a>, then risk assessment<\/a>, and finally prioritized remediation or exception acceptance<\/a>. An incident response<\/a> process is also defined to properly handle potential security incidents when they occur.<\/p>\n

Units<\/a> are accountable<\/strong> for implementing information security and it should be embedded into the entire lifecycle <\/strong>where decision-making rights corresond to risk level<\/strong>.<\/p>\n

Drivers that influence the strategic direction<\/strong> and prioritization of the program include:<\/p>\n