New risk classification standard and risk assessment dashboards help departments track and maintain security compliance

Having accurate data about what systems you have, how they are connected, and how they are used is critical for digital security. This fiscal year, the Division of IT’s Security & Identity unit completed key work to better identify areas of risk and provide analysis that enables better management of data and digital assets. 

The team updated the university’s inventory of system risk classifications, completing risk assessments on all high risk systems. Additionally, an update of university-wide unit inventories was completed using Isora GRC, an information security risk assessment tool that is used  to conduct targeted risk assessments based on customized criteria including laws, regulations, and standard frameworks. These inventories can be used by departments and their IT personnel to understand where their data is maintained, based on high, moderate, and low risk data classifications.

To enhance visibility into IT security system risk assessments, the ITSO created a real-time dashboard to provide insight into unit inventory compliance status. These dashboards empower leadership to pinpoint and mitigate areas of vulnerability, as well as to track their progress in making their data and systems more secure.