Mission Statement

The mission of the UT Dallas Information Security Office (ISO) is to provide proactive security analysis, develop robust security architecture and ingrain security awareness into the university's environment. ISO works in partnership with the various Information Resources departments, Internal Audit, Compliance and Information Technology representatives from each school to support the university's mission and goals.

Areas of Responsibility

Incident Response & Management
ISO will manage incident response, investigation, and reporting. This will include performing network intrusion detection and conducting forensic criminal & administrative investigations, receiving and processing security incident complaints, overseeing recovery, and restoration for security-related events. ISO will take permitted or required actions to protect university Information Technology (IT) resources in consultation with appropriate executive management.

Information Risk Management
ISO will maintain an information security risk management program to evaluate threats and vulnerabilities and assure creation of appropriate remediation plans. This will include working on disaster recovery planning, and compliance with all applicable regulations, as well as with the Business Affairs Office on business continuity planning.

Information Security Monitoring
ISO will conduct institutional security testing and monitoring in support of policy enforcement and operational assurance. ISO will monitor computer and network resources for suspicious activity and test information resources for security vulnerabilities within the scope of the Information Resources Security policies.

Information Security Policy & Procedures
ISO will provide direction for university security policies and practices to protect critical resources and services. ISO will create security policies and standards for approval by university leadership after evaluating existing and emerging security-related laws, regulations, and policies for compliance goals.

Infrastructure
ISO will provide guidance and assistance for access, authentication and authorization practices and procedures across all platforms.

Education
ISO will provide a security awareness program that encompasses policies and procedures, risk avoidance, best practices and incident response procedures.

This area here left blank