Shared Goal
Protecting UBC information and systems is critical to fulfilling UBC’s vision, purpose, and values. The Compliance Support Program (CSP) team partners across the university to support units in identifying and meeting their information security responsibilities. Together, we work to reduce the risk of privacy and information security incidents across the university community.
Available Support
CSP provides structured engagement, practical guidance, and ongoing support to help units recognize and revisit areas of improvement within their IT environment and strengthen their overall security posture.
Program Overview
As UBC Electronic Systems and services continue to evolve across UBC's diverse academic and administrative environments, the need for a more coordinated, standardized, and sustainable approach to information security grows increasingly important. To address this, the Compliance Support Program (CSP) supports units in understanding institutional security requirements, strengthening local security practices, and fostering a shared culture of accountability and continuous improvement across the university.
Originally launched as a program, CSP has since evolved into an ongoing operational function that provides guidance to academic (including research) and administrative units in understanding and meeting the UBC Information Security Standards. CSP currently focuses on communicating essential controls, clarifying accountability for securing UBC Electronic Systems, and helping units recognize where improvements may be needed within their IT environment.
Through structured engagements and guidance, units are better equipped to understand their current state and develop plans and processes to strengthen their security posture over time. The approach emphasizes collaboration, working closely with Administrative Heads of Unit, IT Representatives, and other key stakeholders to support continuous improvement. The goal is not only to assess compliance with the UBC Information Security Standards, but also to enable informed decision making and strengthen how UBC Electronic Information and Systems are protected across the university.
Accountability
Accountability for securing UBC information and systems lies with Administrative Heads of Units (AHoU). Administrative Heads of units are responsible for establishing and maintaining UBC Electronic Information and Systems within their areas of accountability.
In the event of an information security breach, the extent to which a unit can demonstrate compliance with the UBC Information Systems Policy (specifically essential controls) will impact the following decisions:
- Cost allocation associated with incident response and recovery
- The necessity to conduct a full audit of information security controls within the unit
- Performance assessments for individuals who have failed to carry out their responsibilities under the UBC Information Systems Policy, including any appropriate performance management or disciplinary measures.
Go Further...
- How to complete the self-assessment using ISORA?
- Policy SC14- Acceptable Use and Security of UBC Electronic Information and Systems
- Information Security Standards Glossary
- Defining University Glossary Terms Office of the CIO
- Privacy Matters @UBC - Personal Information, How to protect personal information online
- Subdomain Registration
- Data Governance at UBC
- UBC’s How to Stay Secure
- Policy, Standards and Resources