Your device is set to dark mode so this site is matching that preference. You can click the sun icon to change your site experience.
CATEGORY
This report identifies the components of the CALS Endpoint Management and Security Standard and approach to implementation. The standard is based on UW Madison policies and includes all required cybersecurity controls. Our approach staggers the implementation into phases based on reducing risk, maturity of tools and services, and complexity of implementation across the college.
Guideline
This standard provides a consistent approach for CALS IT professionals to manage and secure endpoints in compliance with UW-Madison and UW-System policies. This document is also to inform CALS faculty, staff, and students regarding guidance to secure and manage university owned and personal endpoints.
Guideline
This statement informs CALS faculty and staff of information technology (IT) data collected and managed by campus cybersecurity, network, and endpoint management tools used to protected points from cybersecurity attacks.
Guideline
This policy intends to ensure data and information systems are stable and reliable for all CALS teaching, learning, research, and outreach efforts by monitoring and remediating potential cybersecurity vulnerabilities. This policy provides direction to all CALS IT staff or other staff that supports various technologies.
Policy
This document accompanies the CALS Vulnerability Management Policy by identifying details in roles and responsibilities, operational components, and supported tools of the CALS Vulnerability Management Program. The document also delineates reporting, metrics, and key performance indicators to inform stakeholders and gauge the program’s effectiveness in managing and reducing risk.
Guideline
Cybersecurity risk will be managed to ensure that the likelihood and impact of threats and vulnerabilities are minimized to the extent practical. Guided by the principles below, the focus of this policy is the protection of university data and the associated information systems.
Policy
This policy establishes shared definitions and practices, digital accessibility requirements and standards, and reporting requirements to ensure compliance with the university’s obligations to nondiscrimination under applicable state and federal regulations.
Policy
This policy applies to any device, virtual or physical, used to conduct UW-related business, that connects to the UW System-managed network, and/or is used to access, manage, process, or store UW System data. Devices include endpoints purchased or obtained through UW–Madison and personally owned devices that are used to conduct the work of the university.
Policy
This policy defines four types of information incidents: (1) loss or theft, (2) intrusion by malware or unauthorized access via the network, (3) physical intrusion, and (4) all others. Each type has criteria that make a possible incident "reportable." The policy requires the reporting of reportable incidents unless one of the exceptions applies. The Incident Reporting and Response Procedures are the implementation of the policy.
Policy
These procedures implement the mandatory reporting required by the Incident Reporting and Response Policy.
Guideline
