Office of Cybersecurity
The Office of Cybersecurity supports the CIO and the campus by leading and managing campus efforts to reduce risk. Strategies include appropriate handling of data, continued diagnostics, cybersecurity awareness training, and good processes and procedures to manage our intellectual property and other sensitive information.

A HIPAA incident would include the loss of Protected Health Information (PHI)




Cybersecurity teams

Risk management & compliance (RMC)
Working with campus partners to secure data and reduce risk.

Cybersecurity operations
Monitoring the campus network for vulnerabilities, attacks, and incident response.

Business systems security & Cybersecurity programs
Security for infrastructure and Enterprise Resource Planning (ERP) systems and security education, training, and awareness.

IT policies
IT policies, standards, and implementation plans.
IT asset reporting policy
This policy:
- Establishes an IT asset reporting program which provides the framework, guidelines, and requirements for reporting accurate IT asset data at UW–Madison.
- Supports procurement, maintenance, security, and disposal operations, and assists with the identification of institutional IT spending.
- Informs IT strategic planning and provides data to identify and resolve Cybersecurity risks.
Cybersecurity news, scams
Cybersecurity news
Strategies, initiatives & plans

2023-2025 Cybersecurity strategy
Malicious actors across the globe put UW–Madison’s data, systems, and digital assets at risk. To reduce our risk, UW–Madison’s Cybersecurity Strategy must also continually adapt and evolve.

Cybersecurity regulatory compliance
Supporting UW–Madison faculty, staff, and researchers with compliance in multiple regulatory categories impacting protected and sensitive data including HIPAA, GDPR, CUI and PCI-DSS.

Data Classification Initiative
The Data Classification Initiative is a multi-year effort to reimagine data classification at UW–Madison.

Endpoint management
The Endpoint Management & Security Project’s overarching purpose is to identify, procure and implement a common set of efficient and effective solutions before January 1, 2020.

Self‑attestion for firewall administrators
It is imperative that we remain secure behind a firewall (both physical and virtual) with proper Palo Alto infrastructure configuration. With this in mind, the team has developed a comprehensive self-attestation plan for firewall administrators.
Give us your feedback
Share your thoughts and have a voice in UW–Madison’s cybersecurity plans.





