Common Systems Group (CSG)

January 25, 2005

Meeting Summary

CSG Attendees: Jim Davis, Steve Duim, Bill Jepson, Carol King (for Pam Taylor), Robert Konishi, Max Kopelevich, Kathleen O’Kane, John Lennon (for Paul Craft), Tom Phelan, Sean Pine (for Jason Frand), Nick Reddingius, Marsha Smith, Eric Splaver, Stephen Schwartz (for Terry Ryan), Kent Wada, Esther Woo-Benjamin, Don Worth

Guests: Mike Lee (PDP Participant), Mike Van Norman (CTS)

Agenda

1) Reports

a) SRDB – Reallocating Functionality

Nick Reddingius gave an overview of the various broad areas of functionality that are not yet accounted for in SRDB but will need to be resolved. His presentation ‘Reallocation of SRDB Functions’ is posted at: http://www.csg.oit.ucla.edu/documents.htm#January2005. Nick can provide additional details on request.

b) Data Centers Data Gathering Project Update

The ‘Electronic Information Security Risk Assessment Survey’ has gone through several iterations since it was first introduced to CSG in March 2004. Input from that meeting was used to revise the survey. It was then beta tested by the Library, Graduate Division, and AIS and revised again. The scope of the data gathering project is now focused on administrative applications and data. Research and Instructional applications and data will be addressed in later phases. A team of four Professional Development Program (PDP) participants will be administering the survey through in-person interviews during site visits in February in March. The in-person interview methodology was chosen so there could be an interactive and iterative process for getting a better understanding about areas not covered in the survey itself. Since little is known about data/server centers across campus, the information gathering process will necessarily be dynamic. As information is learned, adjustments may be made to the process.

There was a suggestion to separate the server/data center or machine room aspects from the application questions.

2) UCLA Logon ID Address Space

CTS is proposing to expand the current Bruin OnLine ID to 15 characters and use it as the UCLA Logon ID. This ID and the associated password will be used as a single identifier which will be both the common logon ID for various campus services and the official persistent email address. All existing Bruin OnLine IDs will automatically become UCLA Logon IDs. Current account holders will be given a one-time opportunity to select a new UCLA Logon ID and return their existing Bruin OnLine ID. The text of the proposal is posted at: http://www.csg.oit.ucla.edu/documents.htm#January2005 .

The CSG members in attendance unanimously endorsed this proposal.

3) Security Policies

a) Review of expected changes to the UC ECP

UC has proposed some revisions to its Electronic Communications Policy (ECP) and Electronic Information Security (IS-3) Policy and is seeking input from all the campuses. Alfonso Cardenas as chair of the UC Information Technology and Telecommunications Policy (ITTP) committee is gathering input from various campus groups to report on behalf of UCLA.

The revisions are of three types: 1) real policy change, 2) alignment among the ECP, IS-3, and Records Management and Privacy (RMP) series of policies, and 3) clarifications to bring policies up to date. The principles did not change.

There is only one real policy change. The policy references IS-3 encryption guidelines that prohibit encryption of stored data. That prohibition is being removed and the reference is deleted.

Excerpts showing proposed revisions to the ECP is available at: http://www.ucop.edu/irc/policy/ecp/documents/ecp.revisions.11.14.04.doc

b) Review of expected changes to the UC BFB IS-3

The most significant revision is an expansion of scope to govern “conduct of activities in support of the University’s mission”. Previously, the policy only applied to administrative systems.

A marked-up draft (excerpts only) of the revised IS-3 Policy is available at:

http://itpolicy.berkeley.edu:7015/UCITPSO/DRAFTS/IS3.total.11.12.04.doc

c) Web browser support

There was discussion of how to devise an ongoing process by which the campus can have a common understanding of what browsers are currently ‘supported’. More discussion is still needed, but the Group agreed that it is time to put together definitive statements and recommendations.

Meeting Schedule for Remainder of 2005:

Tuesday	February 22	2:00 – 4:00 p.m.	2325 Murphy
Tuesday	March 22	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	April 26	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	May 24	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	June 28	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	July 26	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	August 23	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	September 27	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	October 25	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	November 22	2:00 – 4:00 p.m.	2121 Murphy
Tuesday	December 20	2:00 – 4:00 p.m.	2121 Murphy