Risk Assessment

Risk Analysis (STAR) - Introduction

Why do a risk analysis for your information technology assets? Who will it benefit? The Security Targeting and Analysis of Risks (STAR) process is one that will benefit both the individual department and the university as a whole. Completing such an analysis is extremely important in today's advanced technological world. It is important that users understand what risks exist in their information technology assets environment, and how those risks can be reduced or even eliminated.

The Information Technology (IT) Security Office has identified some common risks, and put together a process and template for departments to use in their effort.  Individual departments are encouraged to review those common risks to see which might apply to their specific environment.  They should then review their surroundings to determine what specific risks exist for inclusion into the process.

This web site references various security resources (university policy, state and national web sites, audit plans, and industry references) for departments and individuals to utilize in their efforts to provide a secure environment.

Any department that has questions concerning the process should contact the IT Security Office --

            Email can be sent to:  wdonald@vt.edu or npachis@vt.edu
            Campus mail can be sent to:  1300 Torgersen Hall – mail code 0284

This office is available to assist departments in understanding the process and getting started on completing their report.  Each department should send their completed business impact analysis/risk assessment (as well as updates) to this office so a central repository can be maintained and monitored.

Next: Resources