Enterprise Security continues to make progress on the Framework Tools project, the ongoing initiative that provides Ohio State with the tools to organize, measure and manage information risk. The project continues the development and implementation of the overall Information Risk Management Program established in FY14.
To recap where we began, during November 2013, 159 university organizations completed the Information Risk Survey, which assessed 30 different information security related risk areas, an unparalleled accomplishment that provided a much-needed baseline.
Fast-forward to 2015 and support from university organizations has never been stronger. Through additional understanding from increased collaboration, the 159 university organizations have been streamlined into 113. All university organizations completed the second annual survey in October 2014 as well as their individual risk management strategies in December 2014. The overall risk scores improved by 10% over year one! As an added measure of success, the Information Risk Management Program achieved 100% participation within one year of its establishment!