UC Berkeley Launches Cyber Risk Management Program

• •UC Berkeley's CRMP focuses on risk-based governance for cybersecurity.
• •Units are responsible for managing their own information security risks.
• •The program includes resources like checklists and self-assessment tools.

On October 16, 2026, UC Berkeley announced the Cyber Risk Management Program (CRMP) aimed at enhancing digital risk management and compliance with the UC systemwide IS-3 Electronic Information Security Policy. The program emphasizes a risk-based governance model rather than a technical checklist, aiming to protect the university's reputation and operational integrity. Key principles include shared responsibility for security, unit-level risk management, and a focus on risk assessment. The program provides resources such as checklists, self-assessment tools, and improvement plans for units to prioritize cybersecurity efforts. The initiative is part of a broader effort to bolster cybersecurity across the University of California system.