I wish to share two matters related to the implementation of the Policy on Information Security and the Protection of Digital Assets adopted by Governing Council on February 25, 2016.

First, the Policy vests overarching responsibility for the protection of the University’s Digital Assets in “the President or designate.”  President Meric Gertler has assigned the newly announced position of Associate Vice-President and Vice-Provost, Digital Strategies as his designate for the purposes of the Policy. As we are currently undertaking the search for the new AVP and Vice-Provost, Digital Strategies, he has asked me as Vice-President, University Operations, to serve as his designate until the new position is filled.

Second, the Policy requires the establishment of an Information Security Council (ISC) “…in order to ensure broad consultation in planning and decision-making processes.”  The ISC’s specific mandate is to:

“…assist in the review of envisioned and unanticipated risks to the University’s Digital Assets; collaborate with the President or designate to initiate information security initiatives; educate the University community on digital security best practices; and develop and recommend Procedures, Standards and Guidelines for the protection of the University’s Digital Assets.”

The composition of the ISC will take into consideration recommendations made by the Working Group on the Implementation of Information Risk Management Practice.

I welcome nominations of faculty and administrative staff to serve on the Information Security Council. In order to enhance the quality of the Council’s output, we would ask that nominations include brief descriptions of a candidate’s relevant experience and knowledge as they would directly relate to membership on the Council. Confidential nominations should be submitted by Friday, October 7 to:

Elizabeth Cragg
Director, Office of the Vice-President, University Operations
elizabeth.cragg@utoronto.ca