October is National Cybersecurity Awareness Month and the UCOP Information Security Team is helping our colleagues learn how to protect themselves at work and in their private lives.

A message from Chief Information Security Officer April Sather

As I embark on my 4th Cybersecurity Awareness Month at UCOP, I want to take a moment to reflect on the incredible progress we’ve made together over the past year. Thanks to your dedication and partnership, we addressed critical security vulnerabilities, strengthened our Duo multi-factor authentication, and achieved our BitSight rating stretch goal of 780, reflecting our enhanced cybersecurity hygiene. A BitSight rating is like a credit score, where higher is better; a high rating means it is tougher for attackers to break in. Learn more by registering to attend the Bitsight webinar on Oct. 22. We also successfully rose to the challenge of the President’s Cybersecurity Letter, reinforcing our systemwide commitment to protecting UC’s digital assets.

This year, we’ve also made strides in securely enabling artificial intelligence at UCOP. AI offers transformative potential—but it also introduces new risks. In 2025, 93% of security leaders expect daily AI-driven attacks, and incidents involving AI systems have surged by over 56%. These threats underscore the importance of building secure and trustworthy AI systems. UCOP is taking a risk-based approach to AI governance, implementing strong access controls, monitoring, and compliance frameworks to ensure responsible deployment.

Cyber threats continue to evolve, especially those driven by financial gain. Social engineering attacks targeting paychecks and personal information are on the rise. Please stay alert to suspicious messages, verify unexpected requests, and report anything that doesn’t feel right. In general, use long and strong passwords that don’t include personal information like name, school you attended, etc.; these are harder for attackers to guess.

Cybersecurity is a shared responsibility, and your awareness makes a difference. I encourage everyone to participate in at least one Cybersecurity Awareness Month event hosted across UC locations. These events are designed to be engaging, informative, and a great way to strengthen our community’s cyber resilience. Finally, know that we are your partner in security. When you become aware of a security issue or vulnerability, let us know. Regardless of the root cause, level of effort or cost to address, we will work with you to find a solution. Thank you for your continued commitment to keeping UC safe.

Warm regards,

April Sather
Chief Information Security Officer
UCOP & Systemwide Cyber Defense Officer (Interim)

Cybersecurity Awareness Month Events

• The Latest AI-Based Attacks and How to Protect Yourself from AI Scams
• Privacy, AI and Cyberlaw 101
• Q-Day: Quantum Computing, AI and Cybersecurity
• Humans, Hackers and Hallucinations: The Future of Cybersecurity
• Let’s Talk About Privacy. Let’s Talk About You and Me.
• Authentic or Artificial: AI-Generated Content vs. the Real Deal

Cybersecurity Resources

• Information Security website
• Report an Incident or Vulnerability
• UCOP Unit Information Security Lead Directory
• Cybersecurity Awareness Month Zoom background

About

View all post by