[Campus Notice] Fwd: Your Action is Required: UC Cybersecurity Mandate

Fri Apr 18 15:52:58 PDT 2025

Dear CFAOs,

Thank you for giving ITS the opportunity to provide an update on the UC
Cybersecurity Mandate 2025 effort at the April 17 FHROG meeting. The
presentation deck has been attached for your reference. Also for your
awareness, please see the guidance that was sent to all faculty this
morning (see email thread below).

We’d also like to take this opportunity to provide you with guidance for
your student employees:

Administrative (non-academic) student employees

All administrative (non-academic) student employees are expected to use a
university-issued device that is secured by UCR Secured Device Services
<https://its.ucr.edu/secured-device-services> to perform their work.

Please be reminded that “devices” refers to computers, laptops, and
Microsoft Surface tablets, including those purchased with grant funding.

Academic student employees

Academic student employees are not currently required to use a device that
runs the toolset. Additional information will be provided if and when this
guidance changes. They are, however, presently required to remain current
on their annual cybersecurity training and to practice strong cybersecurity
hygiene to ensure the protection of our Highlander community.

Guidance is available for student employees
<https://its.ucr.edu/cybersecurity-mandate-2025#student-employees> to
better understand their role in helping UCR meet the security requirements
of the UC Cybersecurity Mandate:

   -

   Administrative (non-academic) student employees
   <https://docs.google.com/document/d/1kA8eiPuCoBXUpQFNjuuoZ3VfZDc58iZ6DrWBvWlXcT8/edit?usp=sharing>
   -

   Academic student employees
   <https://docs.google.com/document/d/13twVq2ZtN4Zf9DmwKTFt-OVfE6G9rYT9vl0f-N_ASTE/edit?usp=sharing>

Sincerely,

Matthew Gunkel

Chief Information Officer and Associate Vice Chancellor

Dewight F. Kramer

Chief Information Security Officer

---------- Forwarded message ---------
From: UCR Information Technology Solutions <its at ucr.edu>
Date: Fri, Apr 18, 2025 at 9:09 AM
Subject: Your Action is Required: UC Cybersecurity Mandate
To: <faculty at scotmail.ucr.edu>

[image: image]
Your Action is Needed for UCR to Meet the UC Cybersecurity Compliance
Deadline

Colleagues,

We are nearing the deadline to meet new cybersecurity requirements issued
by the UC Office of the President. To be in compliance, all devices that
connect to secure UCR resources must utilize the UCR security toolset.

If you perform university work using a device that is not managed by UCR
IT, you must take action now to install and use the toolset or risk being
unable to access campus resources in the future. Computers, laptops, and
Microsoft Surface tablets, including those purchased with grant funding,
are subject to the mandate. If you use a personal device and wish to
continue using it to connect to campus resources on and off campus, you
must install and use the toolset on that device.

More guidance, including information about your role in this process, can
be found below.

Thank you for your attention to this urgent matter and for doing your part
to keep our Highlander community safe.

Sincerely,

Elizabeth Watkins

Provost and Executive Vice Chancellor

Matthew Gunkel

Chief Information Officer and Associate Vice Chancellor

Dewight F. Kramer

Chief Information Security Officer
Download the UCR Security Toolset <http://endpointinventory.ucr.edu/home>

Installation guides are available for Windows
<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012265>
and MacOS
<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012269>
users.
Guidance

Resources

What's my role? View your checklist:

   -

   I manage my device
   <https://docs.google.com/document/d/1h0kCYKFfb41sInBec-Bqc8EtRs-fqu08Jesv3mrVmh8/edit?usp=sharing>
   -

   IT manages my device
   <https://docs.google.com/document/d/173rXeikz-Ko5-qjOm4WUVhRVRcntpCIGKhCF4iHiToA/edit?usp=sharing>

Find answers to FAQs about the mandate
<https://its.ucr.edu/cybersecurity-mandate-2025#faq> and the security
toolset <https://its.ucr.edu/uc-security-toolset#security-toolset-faq>.
UC-wide Mandate

All UC campuses are called to comply to help protect sensitive data,
maintain operational continuity, comply with regulations, and mitigate
financial risks associated with cyber attacks.
Read the Letter <https://its.ucr.edu/uc-presidents-letter>

Support

   -

   Review the toolset information and guidance
   <https://its.ucr.edu/uc-security-toolset>
   -

   Report an issue with installation
   <https://ucrsupport.service-now.com/ucr_portal?id=sc_cat_item&sys_id=d10c39ee0f348300138942bce1050e8b>
   -

   Get help in person by visiting an IT Support station in the libraries or
   SSC
   -

   Attend the next virtual office hour with ITS
   <https://events.ucr.edu/event/uc-cybersecurity-mandate-office-hours-with-its>

Campus Compliance Report

[image: image]
What's at Risk If UCR Doesn't Comply by May 28, 2025?

   -

   Employees who have not taken the required steps to be compliant with
   training and device security will not be able to access secure UCR
   resources and applications, such as Canvas.
   -

   UCR will face costly financial penalties
   <https://its.ucr.edu/cybersecurity-mandate-2025#campus-consequences> and
   greater liability, which may further impact budgets.
   -

   Your personal information and university data will be at greater risk of
   cyber attack or ransom
   <https://its.ucr.edu/cyber-attacks#higher-ed-cyberattack-news>, which
   may result in research data loss, identity theft, prolonged disruption to
   university operations, and personal financial loss.

Learn More

The security toolset is required for any device that is used to connect to
secure UCR networks and cloud resources, including personal devices. These
devices include computers, laptops, and Microsoft Surface tablets (learn
what’s not included
<https://its.ucr.edu/uc-security-toolset#are-mobile-devices-included-in>).
[image: image]
Reason for Change: UC Cybersecurity Mandate 2025

These changes are part of UCR's plan to better protect our community and
comply with a new UC systemwide mandate.
Learn About the Mandate <https://its.ucr.edu/cybersecurity-mandate-2025>

[image: image]
Video: Message from the Provost

Watch this video message from Provost Watkins to learn why UCR is
strengthening MFA, along with other key steps we must take to keep our
Highlander community safe.
Watch on YouTube <https://www.youtube.com/watch?v=8-bMZddr-Bc>

Need IT help? Submit a support ticket at its.ucr.edu/help

Information Technology Solutions

Computing & Communications Building

900 University Ave.

Riverside, CA 92521

951-827-4848 | its.ucr.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ucr.edu/pipermail/tech-bulletin/attachments/20250418/24bed2f9/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 42199 bytes
Desc: not available
URL: <https://lists.ucr.edu/pipermail/tech-bulletin/attachments/20250418/24bed2f9/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 36715 bytes
Desc: not available
URL: <https://lists.ucr.edu/pipermail/tech-bulletin/attachments/20250418/24bed2f9/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/jpeg
Size: 361433 bytes
Desc: not available
URL: <https://lists.ucr.edu/pipermail/tech-bulletin/attachments/20250418/24bed2f9/attachment-0001.jpe>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 604736 bytes
Desc: not available
URL: <https://lists.ucr.edu/pipermail/tech-bulletin/attachments/20250418/24bed2f9/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: UCOP Cybersecurity Mandate 2025 Compliance Plan.pptx (1).pdf
Type: application/pdf
Size: 4402095 bytes
Desc: not available
URL: <https://lists.ucr.edu/pipermail/tech-bulletin/attachments/20250418/24bed2f9/attachment-0001.pdf>