Information Security

This office helps the campus protect the confidentiality, availability and integrity of UC Davis’ information and information assets. The office offers support, assistance, education and advice; manages certain security processes; and helps individuals and departments understand how they are responsible for information security at UC Davis, and how they can meet that responsibility. Consulting is part of all of its services and programs.

Risk assessment

Helps departments evaluate and improve their security environments, based partly on their answers to the yearly UC Davis cybersecurity survey. Includes security reviews of contracts with vendors.

Security Operations Center

Information security analysts in this center work with departments to look for, analyze, respond to and help prevent incidents. They work closely with the campus Network Operations Center to protect the UC Davis network.

Outreach and training

Addresses the human side of security, through outreach events, training in units, and summer programs (such as the Information Security Symposium). Includes working with faculty to help them create a more secure environment for their research and other work.

Partnership program

Works with department leaders to understand their security risks, needs and common issues, through individual meetings with the chief information security officer. Builds connections and relationships on issues of information security, and to find the best ways to work together.

Security policy development

The office helps interprets security policies for the campus, and works with the UC Davis risk and privacy offices. The ISO also manages several security policies, and maintains the online Data Sensitivity Guide, a resource that helps faculty, students and staff understand which services they may use to store sensitive data, based on legal, academic and operational requirements.