Jon Good Is Named UCOP Information Security Officer

January 16, 2007

To: UCOP Community
From: Associate Vice President Kristine Hafner, Information Resources and Communications

I am pleased to announce that IR&C; Director Jon Good will assume the role of UCOP Information Security Officer, effective immediately.

Information security is a major concern for the University. The recent security breach at UCLA only reinforces the critical need to continually assess risks, pinpoint where and why sensitive or restricted information (e.g., Social Security numbers) resides in our computer systems, and find vulnerabilities in the applications that provide access to this information. Over the past two years, IR&C; has focused significant resources on securing UCOP's network, desktops and servers, computing platforms, applications, and data repositories containing restricted information. The challenge is daunting, though, as malicious attacks become more and more sophisticated.

Jon has been instrumental in IR&C;'s security initiatives. He has worked closely with UCOP departments to resolve security concerns and has provided leadership for IR&C;'s technical workgroup on information security. Reporting to me in his role as UCOP Information Security Officer, Jon will partner with UCOP functional area experts to guide and deliver critical information security services, such as

• risk assessment and mitigation plans (with Internal Audit and the Controller's Office),
• application vulnerability assessment (with IR&C; and UCOP application developers),
• research and threat analysis (with IR&C; technology experts),
• incident response, investigation, and reporting (with Internal Audit and responsible departments),
• data encryption and protection strategies (with UCOP application owners),
• computer account management (with departmental administrators who set up and terminate accounts),
• training and communications (with UCOP Strategic Communications), and
• implementation of information security policy, standards, and practices (with the IT policy director).

I will rely on Jon to ensure that UCOP continues to pursue the right strategies to protect our computing environment. You may learn more about UCOP information security on the Web: http://www.ucop.edu/irc/itsec/. Information about systemwide and campus programs is available at the IT Security at UC Web site: http://www.ucop.edu/irc/itsec/uc/welcome.html.

Please contact Jon directly if you have any questions or concerns about information security. or call him at: 987-0518.