The University of California Office of the President invites comments on a proposed Presidential Policy Business and Finance Bulletin IS-12 IT Recovery. The policy was rewritten by a systemwide cross-functional workgroup including representatives from UC Santa Cruz and serves to address the following key issues:
- Updates to reflect modern technology (i.e. CD-ROMS are removed, ransomware and cloud computing are addressed).
- Alignment with the current state of emergency planning at UC.
- Narrowed the scoape to IT Recovery.
- Adopting the concept of “recovery level already adopted by UC Health and their academic Locations.” There are 5 recovery levels.
- Location control to manage budget and risk. See the accompanying presentation. Key features:
- Location defined scope.
- Location administered exception process.
- Iterative model of compliance to support a roadmap to desired state.
- Made the policy directly implementable.
- Uniform requirements to support inter and intra Location dependencies.
- Clear assignment of responsibilities.
- Addressing the key gaps identified by Business Continuity Planners and Risk Managers responsible for continuity and emergency planning.
The proposed policy is available online.
Those who wish to comment can contact the Policy Coordination Office at pco@ucsc.edu by close of business on March 3, 2021.
