Campus News
Cybersecurity requirements due by May 28, 2025
New UC systemwide cybersecurity requirements apply to all employees—faculty, staff, contract workers, and student employees—and are due on May 28, 2025.
Dear Colleagues,
As technology evolves, so do the cybersecurity threats that put our university’s systems and community at risk. In response, University of California leadership introduced new systemwide cybersecurity requirements in 2024 to strengthen our collective security posture. These requirements apply to all UC employees—faculty, staff, contract workers, and student employees–and are due on May 28, 2025.
In alignment with the UC requirements and to avoid financial penalties, Information Technology Services (ITS) has worked to interpret, plan and implement complex technical and process changes in support of the cybersecurity requirements. The project has involved regular consultation and collaboration with campus stakeholders. Learn more about the Information Security Investment Plan project.
Our campus is on track to meet the requirements by the deadline. However, to reach full compliance by May 28, we need your help to cross the finish line. Here’s how:
1. Confirm that required cybersecurity awareness training is up-to-date
- Log in to the UC Learning Center to confirm that you and your team have completed the required cybersecurity awareness training before May 28. If you’re already up to date, no further action is needed for this year.
2. Be prepared to connect devices securely
- All devices that access UC Santa Cruz data and resources must comply with UC security control standards. However, some UC Santa Cruz systems require enhanced security measures. Learn more about Verified Access—what it is, when it’s needed, and how to set it up. Note that all ITS-Managed Computers are automatically configured for access
Get support
- Learn more:
- More ways to get support from ITS
Thank you for doing your part to protect our UCSC community. Together, we can meet this mandate and stay ahead of evolving cybersecurity threats.
Aisha Jackson
Vice Chancellor for Information Technology
Brian Hall
Chief Information Security Officer