Information assurance is a shared responsibility, and every member of the U-M community has an important role to play. ITS Information Assurance (IA) collaborates with Security Unit Liaisons (SULs) across the university to leverage information assurance capabilities to protect U-M's digital assets while supporting unit missions. IA works to secure the University of Michigan.
ITS Information Assurance
- Directs IT security, policy, compliance, privacy, and enterprise continuity strategy across the entire university.
- Proactively mitigates IT security risks in partnership with U-M's campuses—UM-Ann Arbor, UM-Dearborn, UM-Flint, and Michigan Medicine.
- Collaborates with U-M units to:
- Develop university IT security and privacy strategy.
- Implement best practice security and privacy infrastructure and protocols.
- Takes a risk-based approach to protecting the university’s most important digital assets while supporting the university's academic, research and healthcare missions.
- Provides information assurance capabilities such as vulnerability scanning, advanced endpoint protection, penetration testing, and more.
- Gives guidance to the entire university community on IT security and privacy compliance best practices to help individuals protect university systems and data, as well as their own personal information.
For information about IA leaders and their roles, see Information Assurance Leadership. Contact IA through the ITS Service Center.
U-M Security Posture
The university embraces a risk-based security posture. That is, we work from a cybersecurity risk management framework that incorporates best practices for protecting U-M’s critical IT infrastructure and digital assets. We focus our IT security efforts on areas of greatest risk and expect all members of the university to share in the responsibility for information security.
U-M IT Security Posture (U-M login required). This document provides details about the university's security posture that members of the university community can use when working with granting agencies, vendors, and others who require this information.
Information Assurance Capabilities
IA provides some capabilities to the university at large and makes additional ones available on request. In addition, IA provides IT security and privacy guidance, best practices, and information.
- Key capabilities are listed at Information Assurance Capabilities.
- Learn about our information security and privacy protocols in pursuit of operational transparency.
- To request services from IA, ask questions, make suggestions, or share concerns, work with your unit's Security Unit Liaison (SUL) or contact us through the ITS Service Center.
Securing U-M
We secure the U-M environment by balancing security and openness, which is a hallmark of academic institutions. Over the years, we have remained committed to protecting the U-M culture, values, and belief in privacy, academic freedom, and free thought and expression.