IAS IT Policy Summary
Last updated: August 1, 2007

UC Berkeley IT Requirements
UC has many policies relating to computing, electronic communications, and data security. A list of the UCB computer policies can be viewed at: http://technology.berkeley.edu/policy/ Policy Updates November 15, 2007: http://istpub.berkeley.edu:4201/bcc/Spring2008/1018.html

IAS IT policies are based on these requirements as they relate to the mission of IAS and its units.  The campus IT security policies state that department, school, and division administrators are responsible for maintaining the security of all computer equipment and data within their administrative units.  To assist with this mandate, the IAS Dean subsidizes IAS Information Systems and Services (ISS) to provide efficiencies of scale and provide access to professional administration at a lower cost for IAS Units. See: ISS Services Summary.

Network Security Monitoring
Campus IT security personnel provide many types of security monitoring, scanning, etc.  When detected, compromised computers are dropped from the campus network. IAS ISS is the primary contact for communication with campus IT and provides security incidence response for all IAS computers.
See: Network Security: http://ias.berkeley.edu/irc/comprefs/security/index.html

Minimum Standards for Networked Devices
Campus policy requires that any computer that is, or may be, connected to the campus network be professionally administered.  For IAS this means employees of the IAS ISS group or a limited set of designated unit IT personnel.

IAS ISS provides IT system administration and support on a recharge basis for IAS computers to ensure that the computers meet the campus requirements for secure systems. ISS keeps track of the changes in the requirements and implementation procedures to provide up to date support.  ISS supports laptops and mobile devices if they are owned by UC or used on the UCB network. 

There must be logon passwords for the computer users that meet specific standards and are different from the administrators passwords used by the system administrator.  To implement the password requirements, IAS requires the use of the campus CalNet Active Directory system. This is a centrally administered system, which links users’ logins to their campus CalNet IDs.   Further information see:  the minimum standard: http://security.berkeley.edu/MinStds/

Network Connectivity
IAS complies with campus network policies and uses campus network services.  IAS ISS provides network support and liaison with the campus network personnel for Stephens Hall and will assist with these functions for any IAS facility upon request.

Servers, Data Storage, and Backup Services
ISS runs central IAS servers for file sharing and web hosting. The servers are available for use by any IAS unit or funded project.  ISS provides secure access to this data storage to enable units to share data and host websites. The servers enable ISS to provide efficient backup services. ISS uses the Campus Backup Service to backup all data on the IAS servers.  ISS manages logins, directory/file security, and sharing on the servers. For more information, see: IAS ISS Central Servers - System Design and Service Levels: http://ias.berkeley.edu/irc/comprefs/network/ias-servers.html

Hardware Purchase, Installation, and Support
IAS ISS personnel are happy to consult on the best practices for hardware purchasing, what works in the UCB environment, and often have information about hardware discounts. Computers purchased by IAS or affiliated units are property of UC. When a new computer arrives it must be set up properly to function in the UCB environment. For details, see above: Minimum Standards for Networked Devices. ISS provides support for IAS computers including, troubleshooting, contacting vendors, replacing parts, and quality control.

Software Purchase, Installation, and Support
Installing or using pirated software on campus computers is illegal.  IAS ISS personnel have access to information about the campus license agreements and discounts for a wide variety of software and are happy to consult on the best practices for purchase of software.  Per the campus minimum standards, software must be installed by system administrators.  ISS provides software support for official UC systems and software and for a basic set of office functions. 

Data Security and Privacy
UCB’s data security policy reflects the data security and privacy requirements of the state of California and US governments.  The primary concern is with keeping personal information from being stolen from UC computers. Avoidance of lawsuits for intellectual property infringements is also stressed. IAS ISS is responsible for ensuring compliance with these requirements within IAS.  See: campus data security policy: http://dataintegration.vcbf.berkeley.edu/DMUP.htm

The campus runs systems to scan for illegal file sharing systems on all campus computers. ISS monitors network usage of IAS computers and communicates with campus IT security offices on suspected infringements.

There is a campus-wide system for registering restricted data. IAS units do not generally have restricted data on their computers. The primary types of restricted data are social security numbers, credit card information, etc. This data when used is stored on central campus servers and viewed through secure web applications.  IAS personnel should make themselves aware of the campus data security policy and either dispose of unneeded restricted data or report to ISS any data that needs secure handling.

As administrators of IAS systems, ISS personnel have access to users’ data. The use and handling of this information is covered in the ISS internal data sharing and privacy policy: http://ias.berkeley.edu/irc/comprefs/policies/techaccess.htm

Data Management and Databases
ISS develops and maintains data management systems that are of use to multiple IAS units.  The primary group of these services is those in support of the Title VI programs data reporting requirements.  Unit information for annual reporting and Cal Profiles has in the past been collected and aggregated.  In addition, systems for computer inventory, event calendars, contacts management, and Faculty CV’s have been developed.  Specialized database development projects are undertaken for specific IAS research units as time and funding allows.

Web Sites and Services
IAS ISS provides free web hosting for any IAS unit or funded project. Unit URL addresses, e.g., stsc.berkeley.edu, can be enabled if the address is not already in use. Student group websites must be supervised by an IAS unit.

There is currently no limit on size for unit web sites. However, it is not advised to host video on the IAS web server due to network bandwidth limitations within Stephens Hall.  UC Berkeley has an agreement with Google to host UCB branded video content and ISS is happy to assist people with hosting their videos.

For websites managed independently by IAS units, ISS provides access to unit web managers to edit their sites on the IAS web server.  Websites may be developed by, or in coordination with, ISS personnel.  In this case, a management plan must be agreed upon in advance for maintenance of the site.  There is no off campus access to the IAS web server.  ISS provides website maintenance and support for IAS Dean’s office websites and others by agreement.  Further info: website development options.

Web applications and programming, including online forms, pose special security problems, both for integrity and privacy of data and increased risks for hacking servers and the network.  ISS does not, therefore, allow units to independently develop or deploy web applications on the IAS servers.  ISS personnel provide development of web applications tailored to the needs of IAS that are not met by UCB services.  A system proposed by an IAS unit may be deployed on the IAS server if it has broad benefit to IAS units and is evaluated and found to able to function securely within the IAS web environment and be maintainable by ISS personnel.  Examples include bulletin board and interactive events calendar software.  Web systems for the IAS directory, events calendar, conference sign-up systems, and other division-wide systems are already developed and supported by ISS.

Ergonomics
IAS ISS does not provide ergonomic workstation evaluation.  Each unit should have a person in their group trained in evaluation or cooperate with a unit that does.

Digital Projector
ISS has a digital projector available for IAS personnel to use for classes, meetings, workshops or conferences. A minimally functional laptop is also available and can be used with the projector for displaying PowerPoint presentations.

Multimedia
Flatbed and slide scanners are both available for IAS projects.  They are currently a bit old and slow, but functional.

Salvage
ISS provides salvage services for IAS computer equipment.

IAS ISS Personnel Functions

Kim Carl – point person for web requests
IAS databases and web content manager; including: IAS directory and events calendar

Unfilled position  – point person for computer support requests
System administration and user support services

Jeanette Zerneke
Director of ISS; Primary website design & development; database development

Bill Gross
Primary system administrator, IAS server manager, advanced user support

Howie Lan
Web system development and programming, including: IAS events calendar

Student assistants
Open Position – Engineering major, assisting with computer support
Amy Sy – Engineering major, assisting with web sites, calendar, and directory
Esther Hsu – PEIS and AS major, assisting with web sites, calendar, and directory