Requesting an EDR / BSS Exclusion
Endpoint Detection and Response (EDR) software is required on all university-owned computers and servers (endpoints) per the UC President’s Information Security Investment Plan.
If you have a business need that prevents the installation of EDR, you may request a one-year exclusion. Exceptions are reviewed by the Information Security Office (ISO) and are granted only under specific technical or legal circumstances, not based on individual preference.
Valid Grounds for Exception
Exceptions may be granted in cases including, but not limited to:
- The endpoint does not meet the minimum hardware or software requirements for the UC-selected EDR software.
- The EDR software prevents the endpoint from performing its intended business or research function.
- Legal or contractual obligations conflict with the use of EDR software.
- There is a strict requirement to run only open-source software.
Before You Submit Your Request
You must obtain approval from your departmental IS-3 Unit Head before submitting the ServiceNow form. You may need to coordinate with your manager or departmental security lead to obtain this approval.
How to Submit an Exception Request
Once you have obtained Unit Head approval, follow these steps:
- Gather the following information for each impacted endpoint:
- IP address
- Hostname
- MAC address
- Identify the data classification level contained on the endpoint(s) and your proposed security risk mitigation plan.
- Fill out the Exception Request for Information Security Policy form.
- In the form section "Functional Owner(s) or Person(s) responsible for the data/business function impacted," provide the contact information for your IS-3 Unit Head.
Note: All exception requests must be submitted through the official ServiceNow form linked above to be considered valid.