IT Policy Activity, Oct 2017
Posted: 2017-09-28 05:00:00 Expiration: 2017-10-26 17:00:00
The itpolicy-announce list communicates policy changes and opportunities to participate in development. Anyone may join by sending a blank email to join-itpolicy-announce@lists.wisc.edu.
Opportunities to help shape IT policy
Participate in the October 3 IT Policy Forum discussion on Continuous Diagnostics and Mitigation Policy.
The UW-Madison Information Security Team reviewed the draft Network Firewall Policy. UW-MIST met on Oct 5.
The newly re-chartered IT Policy Planning and Analysis Team had an organizational meeting on Oct 19.
New / Revised Documents
Vulnerability Scanning Policy. Oct 11, 2017, Revised. Added a reference to the list of IP numbers that originate scans.
UW System - Acceptable Use of Information Technology Resources replaces the UW-Madison Responsible Use Policy. Please update your references.
See the Last Reviewed / Revised List for earlier activity.
Endorsement/Approval Pending
Draft of "Cybersecurity Risk Management Policy".
- The Information Technology Committee (ITC) endorsed the policy on May 19. The University Committee (UC) considered it in Oct and scheduled the first reading in the Faculty Senate for Nov 6. After that, the policy will be reviewed and commented upon by various UW-Madison communities. Details TBD.
The draft Network Firewall Policy.
- The draft policy was reviewed by the Advanced Threat Protection Steering Committee on Sep 21, the Policy Planning and Analysis Team (PAT), on Sep 26, and the UW-Madison Information Security Team (UW-MIST) on Oct 5. The target is to forward the policy to IT governance in November.
The Proposal to Develop a Continuous Diagnostics and Mitigation Policy (CDM).
Development of the proposal will begin after the Oct 3 IT Policy Forum. The proposal will be reviewed and submitted to IT governance.
Draft revision of IT Policy Principles and Procedures (PP&P) and related documents.
The Policy Planning and Analysis Team (PAT) is working on the revision. The main focus of the revision is to tightly link IT policy with IT governance.
- To comment, or suggest additional documents that need to be developed or revised, please email policy@cio.wisc.edu.
Forums / Events
Oct 3 IT Policy Forum results are linked from the forum agenda.
Topic: Continuous Diagnostics and Mitigation (CDM) Policy.
- To comment, or suggest future topics, please email policy@cio.wisc.edu.
Teams / Governance
Divisional Technology Advisory Group (DTAG)
DTAG appointed a representative to the Policy Planning and Analysis Team.
- DTAG has a campus-wide leadership role that is broad in scope and parallels the responsibilities of divisional administrative and technology leaders. Anyone may attend. DTAG meeting schedule. Administrative contact.
Infrastructure Advisory Group (IAG)
IAG appointed a representative to the Policy Planning and Analysis Team.
- The IAG reviews and makes recommendations on campus infrastructure operations and projects. See the IAG charter for details. Administrative contact.
Information Technology Committee (ITC)
ITC appointed the Chair of the ITC as the senior co-chair of the Policy Planning and Analysis Team.
ITC Meeting, Oct 20.
Endorsed the Policy Planning and Analysis Charter.
The ITC is the shared governance advisory body for policy and planning for information technology throughout the university. See the ITC Charge for details. Anyone may attend. ITC meeting schedule. Administrative contact.
Information Technology Steering Committee (ITSC)
ITSC appointed a co-chair of the Policy Planning and Analysis Team.
- The ITSC is the executive body that leads the strategic planning, organization, prioritization, investment, and decision-making activities in all areas of IT throughout UW-Madison. Administrative contact.
Policy Planning & Analysis Team (PAT)
PAT Executive Committee meeting, Oct 9, Notes.
- Planning for the Oct 19 organizational meeting.
PAT Communications subcommittee meeting, Oct 10, Notes.
Review of the Oct 3 IT Policy Forum.
Further work on the IT policy communications plan (always published at the bottom of the subcommittee's latest meeting notes.)
-
Organizational meeting with newly appointed representatives from IT governance groups and executives.
Revised the PAT Charter.
- The PAT assists the Office of the CIO and IT governance with the monitoring and iterative improvement of the IT Policy Principles and Procedures. This includes intake, prioritization, drafting, and analysis of IT policies, communication with the UW-Madison community, and planning for IT Policy forums. See the PAT charter for details. Anyone may attend. Faculty, staff and students at UW-Madison may join. PAT meeting schedule. Contact policy@cio.wisc.edu.
Research Technology Advisory Group (RTAG)
No IT Policy-related activitity this month.
- RTAG advises the Vice Chancellor for Research and Graduate Education in meeting their responsibility to ensure that the policies, practices, and resources around research cyberinfrastructure and information technology are most effectively aligned to support and advance the vibrant research programs at the UW-Madison. See the RTAG Charter for details. Anyone may attend. RTAG meeting schedule. Administrative contact.
Teaching and Learning Technology Advisory Group (TLTAG)
TLTAG appointed a representative to the Policy Planning and Analysis Team.
- TLTAG has a campus-wide leadership role that is broad in scope as it relates to the use of technology to enable practices and efficiencies in teaching and learning. See the TLTAG charter for details. Anyone may attend. TLTAG meeting schedule. Administrative contact.
UW-Madison Information Security Team (UW-MIST)
-
Report on the results of the Oct 3 IT Policy Forum.
Review of the draft Network Firewall Policy.
UW-MIST is advisory to the CISO and IT Governance. See the UW-MIST Charter for details. Anyone may attend. Voting members are appointed. Faculty, staff and students at UW-Madison may join as members at large. Meetings are on the 1st Thursday of the month, 2:00-3:30, Rm 3139 CS. Contact cybersecurity@cio.wisc.edu.
Web and Mobile Accessibility/Usability Coordinating Group (Coordinating Group)
No IT Policy-related activitity this month.
The group coordinates improvement of the accessibility/usability of UW-Madison web and mobile systems and services through implementation of accessibility tools; creation of best practices, standards, and shared-expertise; creation of training for developers and service providers; and measurement of accessibility of websites and mobile applications. See the Coordinating Group charter for details. Meetings are normally on the 2nd and 4th Thursday of the month, 11:00-12:00, at McBurney Center. Contact accessibility@cio.wisc.edu.
-- IT Policy: GARY DE CLUTE