PM-10 Authorization Process

Description

The university integrates authorization processes into its risk management program.

Applicability

• The university’s Chief Information Security Officer (CISO) has the primary responsibility for the implementation of this Control.

Implementation

• 1Implement authorization processes to manage the security and privacy of university data and information resources.

• 2Designate individuals to fulfill specific roles and responsibilities within the university risk management process.

  Related Resource

  See Roles and Responsibilities in the Information Security Risk Assessment Procedures

• 3Integrate the authorization processes into a university-wide risk management program