Notice of Federally Prohibited Devices and Campus Compliance Plan

March 29, 2022
Kiersten Boyce and Dewight Kramer
March 29, 2022

UC Riverside is legally required to adhere to Section 889 of the 2019 National Defense Authorization Act (NDAA 889), which prohibits the use of equipment made by a limited set of manufacturers. In compliance with this Federal requirement and resulting UCOP guidance, the Chief Compliance Office (CCO) and Information Technology Solutions (ITS) have partnered to develop a compliance plan for campus.

The compliance plan includes a change to networking services, taking place May 2, 2022. This change will affect anyone attempting to make a wired connection to the UCR-secure network using a non-compliant device. The compliance plan also outlines the responsibilities of all campus units that manage any aspect of the network and/or procure equipment and services. It is important to note that the prohibition of these devices applies to all University business and research activity, regardless of the funding source.

For more information about NDAA 889, the compliance plan, and the list of non-compliant devices, please visit its.ucr.edu/blog/ndaa. 

Thank you for your attention to this matter, 

Kiersten Boyce

Associate Vice Chancellor and Chief Compliance Officer

Chief Compliance Office

Dewight Kramer 

Chief Information Security Officer 

Information Technology Solutions