Cyber Risk Management Program

Annual: Socreg Review

Annual: Update Unit Work Plan

As Scheduled: Review Unit Self-Assessment 

All Units

All Units

Scheduled Units Only (revised schedule coming soon)

Annual, spring semester

Annual, timing determined by Unit

Every 2-5 years (revised schedule coming soon)

Each year, Unit Information Security Leads (UISLs) will be asked to work with their Security Contacts and/or IT Client Services to confirm that their Unit’s information and registrations in Socreg are correct and current. UISLs will complete a simple attestation to confirm that this has happened.

As a Unit, determine what information security-related work or improvements to prioritize for the next year. 

• An annual toolkit will be developed to help Units with this process

• Units completing their self-assessment review will also have a customized report from the Information Security Office to help identify areas of focus.

Units will review and update their IS-3 self-assessment approximately every 2-5 years according to the projected schedule that will be posted above. 

Higher risk Units will complete this review more frequently than lower risk Units. Since risk level may change over time, the projected review schedule is also subject to change.

The Information Security Office will reach out to Units to help initiate and support this work.