UOG regents adopt IT cybersecurity policies and written information security program

The University of Guam Board of Regents voted unanimously on Jan. 14 to adopt Resolution No. 26-02, approving the university’s information technology cybersecurity policies and a written information security program.

The Physical Facilities Committee reported it reviewed the policies and moved them to the full board, noting the policies are intended to meet requirements the committee described as GLBA compliance. Ricky Hernandez, identified as the university’s new vice president of administration and finance and chief business officer, characterized the adoption as an initial step to improve the university’s cybersecurity posture and to begin building a formal cybersecurity program. Committee members said the policies can be revised and enhanced over time as the university’s needs evolve.

The committee chair moved the resolution to the floor and the motion was seconded; the board voted and the chair announced the motion passed unanimously. The meeting record shows the board did not attach a timeline or specific budget for implementing the program during the session; the policy was presented as a first-phase framework that will require additional work and potentially further committee oversight.

Board members directed that the policies be adopted now and that refinements and validation can be incorporated as the university implements the program. The next procedural step is implementation and follow-up reporting to the Physical Facilities Committee and the board as needed.