[Faculty] UC Cybersecurity Mandate: Secure Access Checks Will Begin September 30

Tue Sep 16 11:16:36 PDT 2025

[image: image]

Colleagues,

In our last message, we celebrated the impressive progress our campus has
made in strengthening our cybersecurity and reaffirmed UC Riverside’s
commitment to moving forward with the UC Cybersecurity Mandate compliance
support plan
<https://its.ucr.edu/blog/2025/09/12/uc-cybersecurity-mandate-2025-compliance-support-plan-updates>.
We would like to advise you that the university will begin its phased
implementation of secure access checks on September 30, 2025.

Our diverse campus community has diverse needs. This phased approach
<https://its.ucr.edu/blog/2025/09/12/uc-cybersecurity-mandate-2025-compliance-support-plan-updates>
allows ITS to provide focused support for each group to help ensure minimal
disruption to your work. To that end, ITS will be the first group subject
to the secure access checks. This pilot phase will help us verify that the
user experience is as expected before other campus groups are phased in.

As we communicated in June, UCR has achieved 96% overall compliance with
the UC Cybersecurity Mandate 2025. This means that the vast majority of you
have already taken the steps to complete your training
<https://uc.sumtotal.host/core/pillarRedirect?relyingParty=LM&url=app/management/LMS_ActDetails.aspx%3FActivityId%3D349429%26UserMode%3D0>
and ensure your device is secured by the UCR security toolset
<https://its.ucr.edu/uc-security-toolset>. As a result, no action is
required on your part to prepare for the implementation of secure access
checks.

If you did not meet the May 28 deadline to comply with the UC cybersecurity
requirements, you should take action now or risk being unable to access
secure UCR resources.

For complete information regarding secure access checks, including what
they are, who must meet the UC cybersecurity requirements, and what secure
UCR resources are exempt, please refer to the ITS blog
<https://its.ucr.edu/blog/2025/09/12/uc-cybersecurity-mandate-2025-compliance-support-plan-updates>
.

Thank you for doing your part to keep our Highlander community safe.

Sincerely,

Elizabeth Watkins

Provost and Executive Vice Chancellor

Matthew Gunkel

Chief Information Officer and Associate Vice Chancellor

Dewight F. Kramer

Chief Information Security Officer
Download the UCR Security Toolset <http://endpointinventory.ucr.edu/home>

Installation guides are available for Windows
<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012265>
and MacOS
<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012269>
users.
Security-Related Reminders
Use the Virtual Private Network (VPN)? Plan to Update Your Client in October

UCR is slated to upgrade its campus VPN from Palo Alto (GlobalProtect) to
Cisco Secure Access (AnyConnect).

Faculty, affiliates, and students who manage their own devices will need to
take steps to install the new VPN client once it is available.
University-owned and managed devices (including departments that are part
of Secured Device Services
<https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012086>)
will automatically be equipped with the new VPN client.

Retirement of the old campus VPN (GlobalProtect) is currently planned for
mid-October. More information, including dates of the change and guidance
on how to access and use the new VPN, is coming soon.
Windows 10 No Longer Supported by Microsoft; Upgrade May Be Required

Please be reminded
<https://insideucr.ucr.edu/announcements/2025/02/11/upgrade-required-microsoft-windows-10-no-longer-supported>
that Microsoft will end support for Windows 10 on October 14, 2025. This
means that devices running Windows 10 after October 14 will no longer
receive crucial security updates, increasing their vulnerability to cyber
threats.

If you use a device that is running Windows 10 (or an older operating
system) you will need to take action before the deadline to maintain
optimal security and comply with UC security standards
<https://its.ucr.edu/security/standards>. For more information and detailed
guidance on the steps you need to take, please reference the ITS blog
<https://its.ucr.edu/blog/2025/02/05/upgrade-required-microsoft-windows-10-no-longer-supported>
.
UC Cybersecurity Mandate Guidance

Resources

Read the UCR Security Toolset Purpose and Use whitepaper
<https://docs.google.com/document/d/1R9d0zK7M-4o-YsihgjZSXB-KuqooxjSJuTmzruI0AB4/edit?usp=sharing>
.

Find answers to FAQs about the mandate
<https://its.ucr.edu/cybersecurity-mandate-2025#faq> and the security
toolset <https://its.ucr.edu/uc-security-toolset#security-toolset-faq>.
UC-wide Mandate

All UC campuses are called to comply to help protect sensitive data,
maintain operational continuity, comply with regulations, and mitigate
financial risks associated with cyber attacks.
Read the Letter <https://its.ucr.edu/uc-presidents-letter>

Support

   -

   Review the toolset information and guidance
   <https://its.ucr.edu/uc-security-toolset>
   -

   Report an issue with installation
   <https://ucrsupport.service-now.com/ucr_portal?id=sc_cat_item&sys_id=d10c39ee0f348300138942bce1050e8b>
   -

   Get help in person by visiting an IT Support station in the libraries or
   SSC
   -

   Attend the next virtual office hour with ITS
   <https://events.ucr.edu/event/uc-cybersecurity-mandate-office-hours-with-its>

Learn More

The security toolset is required for any device that is used to connect to
secure UCR networks and cloud resources, including personal devices. These
devices include computers, laptops, and Microsoft Surface tablets (learn
what’s not included
<https://its.ucr.edu/uc-security-toolset#are-mobile-devices-included-in>).
[image: image]
Reason for Change: UC Cybersecurity Mandate 2025

These changes are part of UCR's plan to better protect our community and
comply with a new UC systemwide mandate.
Learn About the Mandate <https://its.ucr.edu/cybersecurity-mandate-2025>

[image: image]
Video: Message from the Provost

Watch this video message from Provost Watkins to learn why UCR is
strengthening MFA, along with other key steps we must take to keep our
Highlander community safe.
Watch on YouTube <https://www.youtube.com/watch?v=8-bMZddr-Bc>

Need IT help? Submit a support ticket at its.ucr.edu/help

Information Technology Solutions

Computing & Communications Building

900 University Ave.

Riverside, CA 92521

951-827-4848 | its.ucr.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://scotmail.ucr.edu/pipermail/faculty/attachments/20250916/af23736a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 42199 bytes
Desc: not available
URL: <https://scotmail.ucr.edu/pipermail/faculty/attachments/20250916/af23736a/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 604736 bytes
Desc: not available
URL: <https://scotmail.ucr.edu/pipermail/faculty/attachments/20250916/af23736a/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/jpeg
Size: 361433 bytes
Desc: not available
URL: <https://scotmail.ucr.edu/pipermail/faculty/attachments/20250916/af23736a/attachment-0001.jpe>