IT Security and Policy Office

[Jul 17, 2008 14:02] The feature in Xpressions that notifies a user by email when they receive a voice mail is currently not working. Siemens is aware of the problem and is working on it. This does not affect any other aspect of Xpressions.

About Us

What We Do

The Security and Policy Office has three major areas of responsibility:

  • Coordinate University IT Security Activities
  • Develop and Enforce IT Policy
  • Represent UVa Concerning State and Federal IT Issues

Coordinate University IT Security Activities

In its security coordination role, the office focuses on the continuous enhancement of the security of the University of Virginia's diverse and decentralized computing environment. It works in partnership with units and individuals across the University to establish strategic directions, provide security education and training, assess security risks, implement security safeguards, detect and respond to security incidents, develop business continuity/disaster recovery plans, comply with federal and state regulations, and related security activities. It advises senior executives and managers on security issues and risks.

Develop and Enforce IT Policy

In its policy role, the office works with advisory committees, legal counsel, and others to develop, implement, and keep current a comprehensive set of policies governing the University's information technology resources. It provides ongoing policy interpretation, education, and advice to the University community, and it works with various University units and law enforcement to effectively address policy or law violations.

Represent UVa Concerning State IT Issues

As legislative advisor to the UVa State Governmental Relations Office, the office provides assessments, advice, and general information on proposed legislation regarding information technology issues. It also has responsibility for reviewing and commenting on new or changed state IT policies, standards and procedures, responding to state requests for IT information, facilitating University compliance with state IT reporting requirements, and keeping appropriate University officials apprised of state IT issues and concerns. Additionally, the Director of IT Security and Policy serves on the State's Council on Technology Services, Information Security Council, and chairs the Virginia Alliance for Secure Computing and Networking.

Services We Offer

Who We Are/Contact Us

  • Shirley Payne, Director for IT Security and Policy
  • Brian Davis, IT Security and Policy Specialist
  • Marty Peterman, IT Security Specialist
  • Karen McDowell, IT Security Specialist
To send us questions or comments, use the organizational contact form.

© 2008 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.