[Ucrea] Action May Be Required: UC Cybersecurity Mandate

Tue May 6 17:14:32 PDT 2025

Tuesday, May 6, 2025

To:
UCR Emeriti & Retirees
From:
UCR Retirement Center on Behalf of UCR Information Technology Solutions
Re:
Action May Be Required: UC Cybersecurity Mandate

[image]

Your Action May Be Needed for UCR to Meet the UC Cybersecurity Compliance Deadline

Colleagues,

We are writing to provide you with guidance on your role in helping UCR meet the UC Cybersecurity Mandate 2025<https://its.ucr.edu/cybersecurity-mandate-2025>.

As a reminder, the UC President issued a letter to all UC campuses in early 2024. According to the letter, all campuses are expected to achieve certain cybersecurity outcomes<https://its.ucr.edu/cybersecurity-mandate-2025#outcomes-to-be-achieved> by May 28, 2025.

The guidance below applies to all UCR retirees and emeriti:

Identity Verification via MFA

§   You are required to use multi-factor authentication (MFA) when logging into UCR systems and resources. This means that after entering your UCR NetID and password, you are prompted to verify your identity using a secure second step, such as entering a one-time passcode that is sent to the Duo Mobile app on your personal cell phone or tablet.

§   This requirement is already in place and should not require additional action on your part unless you have not set up a secure MFA method. UCR offers several MFA methods, including the Duo Mobile app<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0010310>, the Duo Desktop app<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012281>, biometric authentication<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012279>, and hardware security tokens<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012205>. To learn more, visit its.ucr.edu/mfa<https://its.ucr.edu/mfa>.

Completion of Cybersecurity Training

§   If upon logging into a UCR system or resource you receive a message notifying you that you must take training<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012297> to continue, this means that UCR records show you as an active member of the university. You must complete the annual UC Cyber Security Awareness Fundamentals training<https://uc.sumtotal.host/core/pillarRedirect?relyingParty=LM&url=app/management/LMS_ActDetails.aspx%3FActivityId%3D349429%26UserMode%3D0> to ensure continued access to UCR resources.

§   If you are not prompted to complete training upon logging into UCR systems or resources, no action is required on your part.

Security Toolset Download and Installation

§   At this time, if your access is limited to the campus WiFi, UCPath, and your UCR email and calendar, you do not need to install and use the security toolset on your device. Please note that this approach is subject to revaluation.

§   Exception: If you require access to more sensitive UCR resources and systems, including research data, you must use a device that has the UCR Security Toolset<https://its.ucr.edu/uc-security-toolset> installed. Installation guides are available for Windows<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012265> and MacOS<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012269> users. Linux users may request installers by completing the Software Request Form<https://ucrsupport.service-now.com/ucr_portal?id=sc_cat_item&sys_id=9cc6aefb0fadcb40138942bce1050ee3>. Kindly specify that you are requesting Linux installers to install the UCR security toolset and include your UCR campus organization and Linux OS.

§   Note: The security toolset is required for any device that is used to connect to secure UCR resources. “Devices” refer to computers, laptops, and Microsoft Surface tablets, including those purchased with grant funding (learn what’s not included<https://its.ucr.edu/uc-security-toolset#are-mobile-devices-included-in>). As part of UCR's compliance plan<https://its.ucr.edu/cybersecurity-mandate-2025>, devices that are not secured with the toolset will be unable to access secure campus resources and applications beginning June 2025.

§   IT Support: ITS BearHelp is available to help you install the security toolset on your device. For in-person support, you may visit the IT Support Services stations located on the first floor of the libraries and Student Success Center. You may also submit a support ticket<https://ucrsupport.service-now.com/ucr_portal?id=ucr_home_new&logged_in=false> via the IT service portal. Join the virtual office hour with ITS<https://events.ucr.edu/event/uc-cybersecurity-mandate-office-hours-with-its> to learn more.

Additional guidance for retirees and emeriti may be provided in the coming weeks.

Thank you for your attention to this urgent matter and for doing your part to keep our Highlander community safe.

Sincerely,

Matthew Gunkel

Chief Information Officer and Associate Vice Chancellor

Dewight F. Kramer

Chief Information Security Officer

Guidance

Resources

Read FAQs about the mandate<https://its.ucr.edu/cybersecurity-mandate-2025#faq> and the security toolset<https://its.ucr.edu/uc-security-toolset#security-toolset-faq>.

UC-wide Mandate

All UC campuses are called to comply to help protect sensitive data, maintain operational continuity, comply with regulations, and mitigate financial risks associated with cyber attacks.
Read the Letter<https://its.ucr.edu/uc-presidents-letter>
Support

§   Get help in person by visiting an IT Support station in the libraries or SSC

§   Attend the next virtual office hour with ITS<https://events.ucr.edu/event/uc-cybersecurity-mandate-office-hours-with-its>

§   Submit an IT support ticket<https://its.ucr.edu/help>

What's at Risk If UCR Doesn't Comply by May 28, 2025?

§   Employees who have not taken the required steps to be compliant with training and device security will not be able to access secure UCR resources and applications beginning June 2025.

§   UCR will face costly financial penalties<https://its.ucr.edu/cybersecurity-mandate-2025#campus-consequences> and greater liability, which may further impact budgets.

§   Your personal information and university data will be at greater risk of cyber attack or ransom<https://its.ucr.edu/cyber-attacks#higher-ed-cyberattack-news>, which may result in research data loss, identity theft, prolonged disruption to university operations, and personal financial loss.

Learn More

[image]
Reason for Change: UC Cybersecurity Mandate 2025

These changes are part of UCR's plan to better protect our community and comply with a new UC systemwide mandate.
Learn About the Mandate<https://its.ucr.edu/cybersecurity-mandate-2025>

[image]
Video: Message from the Provost

Watch this video message from Provost Watkins to learn why UCR is strengthening MFA, along with other key steps we must take to keep our Highlander community safe.
Watch on YouTube<https://www.youtube.com/watch?v=8-bMZddr-Bc>

Need IT help? Submit a support ticket at its.ucr.edu/help<https://its.ucr.edu/help>

Information Technology Solutions

Computing & Communications Building

900 University Ave.

Riverside, CA 92521

951-827-4848 | its.ucr.edu<https://its.ucr.edu/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ucr.edu/pipermail/ucrea/attachments/20250507/d9c40046/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/jpeg
Size: 361433 bytes
Desc: image
URL: <https://lists.ucr.edu/pipermail/ucrea/attachments/20250507/d9c40046/attachment-0001.jpe>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 604736 bytes
Desc: image
URL: <https://lists.ucr.edu/pipermail/ucrea/attachments/20250507/d9c40046/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 42199 bytes
Desc: image
URL: <https://lists.ucr.edu/pipermail/ucrea/attachments/20250507/d9c40046/attachment-0003.png>