The Information Security Office (ISO) reduces cybersecurity risks by preventing, detecting and correcting threats to UB’s systems, data, assets, and community members. The ISO manages IT risk, security policies, promotes a culture of security awareness, and applies various guiding principles. Such principles enacted and enforced are security as a culture, defense in depth, trust but verify, least privilege, and others.