Risk, Compliance, Metrics, and Reporting

Published on: June 13, 2018


  • Develop security status metrics and a reporting framework
  • Track the progress of remediation on risk items (for example, audit report findings and risk register items)
  • Provide feedback on the risk register
  • Develop a framework for internal and external auditors on the type and level of assurance most needed during corresponding audit cycles
  • Provide guidance to the campus Information Risk Assessment Process