<div dir="ltr"><div><div class="gmail_default" style="text-align:center"><font size="4"></font><i style="">Sent on behalf of Academic Senate Chair Ken Barish</i></div><div class="gmail_default" style="">June 23, 2025</div><div class="gmail_default" style=""><br></div><div class="gmail_default" style=""><b>Assembly Resolution on Use of Trellix and Similar Monitoring Software</b></div><div class="gmail_default" style=""><br></div><div class="gmail_default" style="">Good morning,</div><div class="gmail_default" style="">The attached and below have been transmitted from Academic Senate Chair Steve Cheung to University of California President Michael Drake.</div><div class="gmail_default" style="">Kind regards,</div></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p class="MsoNormal"><span style="font-size:11pt;color:rgb(79,129,189)"><font face="arial, sans-serif">Cherysa Cortez </font></span></p><p class="MsoNormal"><font face="arial, sans-serif"><span style="font-size:8pt;color:rgb(122,110,103)">CONFIDENTIALITY
NOTICE: If you are not the intended recipient, you are hereby notified that you
have received this communication in error and that any review, disclosure,
dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please notify the
Academic Senate Office immediately </span><span style="color:black"><a href="https://post.ucr.edu/owa/redir.aspx?SURL=IcX4ZK3lIEYWOXDpDmM3Vb7zrs4KkFK1mfplzYdNhPoqD7zfiJzSCG0AYQBpAGwAdABvADoAYwBjAG8AcgB0AGUAegBAAGUAbgBnAHIALgB1AGMAcgAuAGUAZAB1AA..&URL=mailto%3accortez%40engr.ucr.edu" target="_blank"><span style="font-size:8.0pt;color:blue">cherysa.cortez<at>ucr.edu</span></a></span><span style="font-size:8pt;color:rgb(122,110,103)"> and permanently delete all copies of this
communication and any attachments.</span></font><span style="font-size:13.5pt;font-family:"Tahoma",sans-serif;color:black"></span></p></div></div></div><div class="gmail_quote gmail_quote_container"><div class="gmail_default" style="font-size:large">- - - - - - -</div><br><div class="msg-1754550659268598839">
<div lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="m_-1754550659268598839WordSection1">
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;text-transform:uppercase">Michael V. Drake, M.D.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;text-transform:uppercase">President, University of California<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;text-transform:uppercase"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif">On behalf of Academic Senate Chair Cheung, I enclose his letter notifying you of the Assembly’s resolution
</span><span style="font-family:"Calibri",sans-serif;color:black">on the Use of Trellix and Similar Monitoring Software</span><span style="font-family:"Calibri",sans-serif">. The text of his letter is pasted below and included in the attached PDF with the resolution.
It will be posted on the Senate’s <a href="https://senate.universityofcalifornia.edu/reports-recommendations/index.html" target="_blank">
Reports & Recommendations</a> webpage.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="m_-1754550659268598839xxmsonormal"><span style="font-family:"Calibri",sans-serif">Thanks very much,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">_______________</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Michael LaBriola<u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Assistant Director<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Systemwide Academic Senate<u></u><u></u></span></p>
<p class="MsoNormal"><a href="mailto:michael.labriola@ucop.edu" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">michael.labriola@ucop.edu</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
| 510.987-0162<u></u><u></u></span></p>
<p class="MsoNormal"><a href="https://senate.universityofcalifornia.edu/" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">senate.universityofcalifornia.edu</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:6.0pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"><img border="0" width="195" height="46" style="width:2.0312in;height:.4791in" id="m_-1754550659268598839Picture_x0020_2" src="cid:ii_1979de79ab04cff311"></span><span style="font-family:"Calibri",sans-serif"><u></u><u></u></span></p>
<p class="m_-1754550659268598839xxmsonormal"><u></u> <u></u></p>
<div style="border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="m_-1754550659268598839xxmsonormal"><span style="font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black">June 18, 2025<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black">Michael V. Drake, M.D.<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black">President, University of California<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black">Re: Assembly
</span><a name="m_-1754550659268598839__Hlk198906689"><span style="font-family:"Calibri",sans-serif;color:black">Resolution on Use of Trellix and Similar Monitoring Software</span></a><span style="font-family:"Calibri",sans-serif;color:black">
<b><u></u><u></u></b></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black">Dear President Drake,<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black">At its June 12, 2025 meeting, the Assembly of the Academic Senate approved the attached resolution concerning the implementation of Trellix
and similar monitoring software. The Assembly vote was 27 in favor and 6 opposed, with 14 abstentions.<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black">The resolution conveys strong concerns about the deployment of Trellix software on faculty computers and devices, citing its extensive surveillance
capabilities, ability to upload or alter files without user consent, and the risk of government access to academic data—particularly in light of Trellix’s participation in the
<a href="https://www.cisa.gov/topics/partnerships-and-collaboration/joint-cyber-defense-collaborative" target="_blank">
Joint Cyber Defense Collaborative</a>. It also notes security vulnerabilities associated with Trellix’s predecessor and outlines the broader risks to academic freedom, privacy, and research integrity.<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black">Accordingly, the Assembly requests the immediate suspension of Trellix and any similarly invasive monitoring software on UC faculty and researcher
computer systems. It also calls for a transparent and inclusive evaluation process with faculty representation for any future consideration of such software.<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif">We look forward to continued
</span><span style="font-family:"Calibri",sans-serif;color:black">constructive </span>
<span style="font-family:"Calibri",sans-serif">dialogue and joint planning on how best to balance cybersecurity</span><span style="font-family:"Calibri",sans-serif"> in an increasingly hostile environment,
<span>with the University’s commitment to academic freedom, privacy, and research.<u></u><u></u></span></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif">Sincerely,<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif"><img border="0" width="90" height="61" style="width:.9375in;height:.6354in" id="m_-1754550659268598839Picture_x0020_1" src="cid:ii_1979de79ab05b006a2" alt="A close-up of a signature
Description automatically generated"></span><span style="font-family:"Calibri",sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif">Steven W. Cheung<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif">Chair, Academic Council<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black">cc: Assembly of the Academic Senate
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"> Provost and Executive Vice President Newman<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"> Chief Operating Officer Nava
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"> Chief Information Officer Williams<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"> Senate Division Executive Directors <u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Calibri",sans-serif;color:black"> Senate Executive Director Lin<u></u><u></u></span></p>
<div class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<hr size="1" width="33%" align="left">
</span></div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal" align="center" style="text-align:center;text-autospace:ideograph-other">
<b><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">Resolution
</span></b><b><span style="font-family:"Calibri",sans-serif;color:black">on Use of Trellix and Similar Monitoring Software</span></b><b><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u><u></u></span></b></p>
<p class="MsoNormal" align="center" style="text-align:center;text-autospace:none">
<b><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">Approved by the Assembly of the Academic Senate<u></u><u></u></span></b></p>
<p class="MsoNormal" align="center" style="text-align:center;text-autospace:none">
<b><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">June 12, 2025<u></u><u></u></span></b></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">WHEREAS, academic freedom, privacy, and autonomy are foundational principles upon which the integrity
and excellence of scholarship, research, and teaching at the University of California depend;
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">WHEREAS, the deployment of Trellix monitoring software permits extensive surveillance capabilities, including
scanning all accessed and executed files, logging detailed metadata (such as filenames, paths, alleged threat names, and hashes), quarantining files, and potentially uploading files deemed suspicious, thus severely compromising faculty privacy and autonomy;
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">WHEREAS, Trellix’s predecessor, FireEye, was hacked in 2020 in the SolarWinds cyberattack, which was
determined by intelligence agencies to be carried out by Russian state-sponsored hackers and exposed over 250 federal agencies, including the Departments of State, Treasury, Commerce, Energy, and Homeland Security, as well as the National Institutes of Health;
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">WHEREAS, the data collected from faculty computers through Trellix software could become accessible to
government agencies without a warrant, due to Trellix’s membership in the Joint Cyber Defense Collaborative—a joint task force comprising private companies and the federal Cybersecurity and Infrastructure Security Agency—that explicitly engages in “rapid bilateral
and multilateral threat information sharing;” <u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">WHEREAS, the unchecked capacity of such software to monitor, upload, and alter files without explicit
consent poses a significant threat to intellectual freedom, confidentiality of sensitive research data, and the ethical standards expected within our scholarly community;
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in">BE IT THEREFORE RESOLVED, that the Assembly of the Academic Senate of the University of California, demands
the immediate suspension of the implementation and use of Trellix or any similarly invasive monitoring software on faculty and researcher computer systems;
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:none"><span style="font-family:"Calibri",sans-serif;border:none windowtext 1.0pt;padding:0in"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-autospace:ideograph-other"><span style="font-family:"Calibri",sans-serif">BE IT FURTHER RESOLVED, that any future monitoring software considered for deployment must undergo a transparent and inclusive evaluation
process involving faculty representation to ensure the safeguarding of privacy, academic freedom, and research integrity.</span><span style="font-family:"Calibri",sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:ideograph-other"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div>