Information Security Standards
As provided under the Information Systems Policy (SC14), mandatory rules governing the use and protection of University data and computing resources have been issued. These rules are referred to as the Information Security Standards (“Standards”).
This page provides a current copy of the Standards for reference and operational use. The official, authoritative version is published in UBC's policy repository, as set out in the Regulatory Framework Policy (GA2).
All Users of UBC Electronic Information and Systems are responsible and accountable for complying with these Standards.
The Standards are divided into two categories: User Standards (prefixed with a 'U') and Management and Technical Standards (prefixed with an 'M'). They are linked in the tables below, along with resources and links to assist Users with compliance.
To learn more about the application of these Standards and how specific audiences should approach them, see the Roles & Responsibilities:
For more information about the Standards, see our Frequently Asked Questions. For a complete list of definitions of the dotted underlined terms used in the Standards, see the Glossary.
A single page containing all the Information Security Standards is also available:
View all standards
Feedback
The Standards are subject to periodic reviews to adapt to changing expectations and risks. We encourage you to provide feedback by email to privacy.matters@ubc.ca.