UCSF to Conduct Campuswide Computer and Data Security Assessment

UCSF will be conducting a campuswide review of computer and data security throughout the campus and medical center in the coming weeks. In a message sent today (July 31) to the campus community, Executive Vice Chancellor and Provost Eugene Washington, MD, said, “Ensuring the security of protected health information and other sensitive data is of great concern to all of us, and it has the attention of all campus leadership. I know that, if contacted, you will give this assessment your full cooperation.” Chancellor J. Michael Bishop, MD, in May appointed a Data Security Task Force and charged it with conducting a comprehensive, expedited review of actions taken and determining further actions needed to protect such data. The creation of this task force underscores the University’s commitment to securing its data. To help carry out its charge, the task force is conducting a campuswide review of computer and data security to identify where systems are vulnerable and to recommend how to secure them. Managers and supervisors will be contacted by UCSF’s Enterprise Information Security office to assist in the assessment. The task force will use the results of the assessment to provide an accurate overall view of UCSF’s information security and, as necessary, to initiate corrective measures. Those contacted to participate in the data security assessment or who have any concerns or questions, may contact UCSF’s Information Security Officer, Carl Tianen at 415/502-1593. Additionally, the UCSF School of Pharmacy is pilot-testing a new workforce self-assessment survey to determine what vulnerabilities may exist in offices, clinics, labs and departments. This survey will be rolled out to the rest of the campus community later this year. “Protecting electronic information resources is the responsibility of all members of the UCSF community,” Washington said. “In fact, safeguarding computer and data security – and protecting the privacy of our patients, which is required by federal law – is essential to fulfilling our mission as a public health sciences university.” UCSF will continue to communicate news and information about computer and data security to raise awareness and reinforce best practices in the months ahead. For more detailed information on security practices for faculty, staff, students, trainees and guests, please visit the Office of Academic and Administrative Information Systems (OAAIS) website.