Risk Management:

Supporting documents: Full policy - Plan - Process - Form

OUHSC IT will implement an Information Technology Risk Management
program designed to keep risks to the OUHSC information system
resources and data at reasonable and appropriate levels.

The Risk Management program at a minimum will include the
identification and classification of information system data and resources,
risk assessment and analysis, control activities, information
communication and training, and monitoring.