11. Website Naming
Are all UBC web application services provisioned within this Unit in the ubc.ca domain name space (e.g. instead of widgets.com, we use widgets.ubc.ca), unless not technically possible?
Control or Process Description
The Unit's staff and faculty are aware that UBC services provisioned within the unit should utilize ubc.ca domain space unless where it is not possible due to technical limitations (e.g. certain SAAS applications).
Why is this Essential?
Web Applications used to conduct University Business must be provisioned within the ubc.ca domain name space, e.g. widget.ubc.ca, unless not technically possible.
Placing applications in the ubc.ca domain space enables users to validate authentic UBC websites, significantly reducing the likelihood of users responding to phishing attempts. Further various cybersecurity services (including proactive monitoring) are only available to site in the ubc.ca domain space, so being outside the domain is likely to result in less secure web applications.
Reference Links
Information Security Standards – M11 Development and Modification of Software ApplicationsmyDNS FAQs
Subdomain Registration
Instructions
N/A
What is Acceptable?
Staff/IT support staffs likely to provision websites/web applications are aware that all applications/sites are in the UBC domain space (unless this has been validated to not be technically possible).