Purpose. The purpose of this WISP is to: (a) Ensure the security, confidentiality, integrity, and availability of personal and other sensitive information the UCR Plan1 collects, creates, uses, and maintains. (b) Protect against any anticipated threats or hazards to the security, confidentiality, integrity, or availability of such information. (c) Protect against unauthorized access to or use of UCR Plan-maintained Personal Information that could result in substantial harm or inconvenience to any individual. (d) Define an information security program that is appropriate to the UCR Plan’s size, scope, and business, its available resources, and the amount of Personal Information that the UCR Plan owns or maintains on behalf of others, while recognizing the need to protect information.
