Standards & Guidelines

45 Results

Guideline

Automatic Enforcement of OneDrive Sync for UCSF Mac Users

Effective on Monday, December 8, 2025, UCSF IT will automatically install the OneDrive Sync folder backup configuration for all UCSF IT-supported Macs.  This is a new requirement replacing CrashPlan, as CrashPlan is no longer an available backup solution from UCSF IT, effective December 17, 2025.  As OneDrive Sync differs from CrashPlan, we ask all affected Mac users to be aware of the following:

Impacted Services: IT Field Services (ITFS) Desktop Support , Computer Backup (CrashPlan), ITFS Supported Macs, Microsoft 365: OneDrive Sync

Procedure

IS-3 Role Termination

If you are unable to fulfill the responsibilities of your IS-3 role for any reason—such as leaving the University or transitioning to a different role—you must notify IT Security by emailing [email protected] at least seven days before the change takes effect. This ensures proper handling and reassignment of your IS-3 responsibilities.

Standard

Standard Code Review Process

The code review standard outlined in this document represents a set of best practices designed to enhance code quality, collaboration, and maintainability across our organization. We recognize that different teams may have unique release strategies, development cycles, and operational philosophies, which can influence the application of these guidelines. As such, while we strongly encourage adherence to these best practices, we acknowledge that strict alignment may not always be feasible or practical for every team.

Guideline

macOS Ventura and Older Versions Discontinued

macOS Ventura (13.x) and older versions are all discontinued and no longer supported by Apple, which also ended security updates and maintenance.  This means these older macOS versions no longer meet UCSF's minimum security standards.It is a minimum security standard of UCSF that all computers used for UCSF business must run vendor-supported versions of operating systems to avoid security risks.  Computers that no longer meet this security requirement will eventually be blocked from UCSF's network.

Impacted Services: IT Field Services (ITFS) Desktop Support , ITFS Supported Macs

Standard

UCSF 650-16 Addendum C - UCSF Incident Investigation

This document outlines the requirements for information security incident investigations at the University of California, San Francisco (UCSF). Effective incident response is essential in mitigating damage and loss due to an information security incident. Proper handling minimizes the disruption to workflow and ensures compliance to federal, state, and University laws, rules, regulations, and policies. This document satisfies the requirement in BFB IS-3 Information Security for Incident Response Procedures.

Impacted Services: Security Incident Response & Investigation