Cybersecurity Requirements
Effective May 28, 2025, the University of California Office of the President has mandated that all UC campuses strengthen their cybersecurity posture to mitigate risks and protect institutional data. UCLA’s plans to meet the mandate are listed on the OCISO’s website on UC Information Security Investment Plan & UCLA Requirements.
| WHAT DO I NEED TO KNOW? | WHAT DO I NEED TO DO? | |
| 1. |
Faculty, Staff, and Graduate Student Researchers need to meet the requirements. The requirements include ongoing training, installing software, and support in understanding your system(s). |
Understand the requirements, and notably: (1) Install EDR Software (item #2) (2) Participate in the Asset & Data Classification Project (item #3) |
| 2. | Install Endpoint Detection & Response (EDR) software | All computers used for university-business must have Trellix software installed. For all devices owned under HSSEAS, contact help@seas.ucla.edu for the Trellix installer specific to HSSEAS. Computer Science members, contact help@cs.ucla.edu. Be sure to include your OS and system name in the message. |
| 3a. | Participation in the Asset & Data Classification Project – Automating the entry of assets into the campus database (ServiceNow CMDB). “Assets” are networked devices purchased with Departmental, central UCLA, or research grant funds. Devices purchased with personal funds are not in scope. “Automation” is done by using one of several methods listed to the right. More detailed information can be found at ServiceNow CMDB Ingestion Methods: Data Collection and CMDB Persistence |
For HSSEAS (excluding CS): For printers, databases, NAS, IoT, any other devices or difficulty with the above installs contact help@seas.ucla.edu. For CS Faculty, Staff, and Graduate Students: Contact help@cs.ucla.edu |
| 3b. | Participation in the Asset & Data Classification Project – Understanding the risk through Classification as defined by UCOP policies IS-3 and IS-12. |
Use our Classifier Website to assist in classification for devices. E-mail help@seas.ucla.edu a copy of the results. If multiple devices share the same classification, the classifier does not need to be run for each device. For that case, create a single document listing the device names along with the associated risk classification. For CS Faculty, Staff, and Graduate Students, E-mail help@cs.ucla.edu with your Classifications. |
The Asset & Data Classification project is made up of two parts that can be done in parallel and delegated, as appropriate, to device owners/users. Please notify us at help@seas.ucla.edu of any delegation so that we can follow up.
If you have reasons to request an exception from either of the above two items, such as private data or critical timing concerns, please contact help@seas.ucla.edu.