The Enterprise Security Architecture and Operations unit is primarily responsible for establishing UM’s institutional IT security strategy, managing the existing security infrastructure, planning and prioritizing IT security investments, incident response, monitoring, forensic investigations, and vulnerability remediation. This unit has an important long-term planning and capital budgeting function, guides disaster recovery and business continuity efforts, and intervenes to minimize or prevent business disruption from security threats. Operationally, this unit establishes the configurations, settings and rules for security appliances such as firewalls and intrusion detection systems. Architecturally, this unit reviews and recommends new security technologies to protect institutional data, systems, and associated assets.