Increase research productivity by providing security advice, assistance and services directly to scholars, in joint support with VPRI and Libraries.

1. Provide security framework and reviews for large research projects such as those using big data.
2. Guidance for researchers to meet funding requirements that include information security frameworks and controls.
3. Offer pre-vetted systems for research teams such as HPC, compute and storage systems.
4. Build resources for self-help.
5. Conduct Research Information Risk Assessments to address risks to research data.

Visit the Research Information Security Program webpage for more details.

Build a culture of security at the University, equipping staff, faculty, librarians, students, and our community with knowledge, practices and technologies needed to protect themselves and the University against security threats.

1. Educate users about security threats, good security practices and U of T security standards and guidelines.
2. Make security learning accessible to all users.
3. Offer curated training content for specific roles.
4. Enable users to test their security knowledge.
5. Gauge security awareness levels of the community to provide targeted training.
6. Periodically update training content to keep it current and relevant.

Visit the Security Awareness and Training Program for more details.

Secure endpoints (i.e., workstations, laptops, mobile devices, servers) and associated data against advanced security threats.

1. Increase user trust that their devices are safe to use.
2. Reduce duplicate anti-virus spend across divisions.
3. Provide consistent baseline protection for all endpoints with advanced protection available for high-risk use cases.
4. Alert on suspicious activities and reduce time to prevent or respond.
5. Identify and respond to threats that are not detected by traditional anti-virus solutions.
6. Reduce use of unsecured personal devices.

Visit the Endpoint Protection Webpage for more details.

Manage risk to critical assets by proactively identifying and remediating security vulnerabilities.

1. Improve visibility into security vulnerabilities.
2. Enable better prioritization of vulnerabilities.
3. Minimize attack surface.
4. Improve rate of vulnerability remediation.
5. Track and report vulnerability remediation.

Drive strategic reinvestment in people, process, and technology to modernize and enable Identity-as-a-Service for U of T.

1. Build foundational capability for divisions to manage their own identity needs and reduce duplication.
2. Securely manage user identity from on-boarding through off-boarding or perpetual relationship.
3. Enhance user experience by streamlining process for getting access.
4. Provide self-service capabilities such as password reset and new access requests.
5. Enable fine-grained access decisions based on risk.

Implement critical security features for UofT institutional email and collaboration tools in Office 365.

1. Increase trust and use of O365 to maximize institutional investments.
2. Safeguard emails against malware and viruses, including “zero-day” threats.
3. Check incoming messages for indicators that a message might be a phishing attempt.
4. Detect and block files that are identified as malicious.
5. Enforce data-specific security policies.
6. Generate real-time reports to decrease time to detect and respond to threats and attacks.

Visit the Advanced Threat Protection website for more details.

Detect and respond to security threats in a timely manner to minimize their impact on the University.

1. Enhance security events monitoring at the institutional and unit level.

2. Enable individual units to expand their monitoring capabilities.

3. Analyze security events and logs to proactively identify threat patterns.

4. Respond to identified threats to remove or contain them in a timely manner.

Expand and improve cloud and edge services for the university to support digital transformation and hybrid work model.

1. Enhance cloud security by standardizing firewall technologies in the cloud.
2. Offer self-service capabilities to create and deliver firewall changes.
3. Expand capacity of edge infrastructure to accommodate increased demand for edge services.
4. Enhance cloud security service by bringing more cloud security architecture resources to support cloud growth.