After having operated a robust campus-wide IT risk assessment campaign for 15 years that is anchored in their overall information security program, the UT Information Security Office reflects on major initiatives and outcomes achieved from: (i) establishing initial policies & procedures; (ii) developing a strong risk management practice; and (iii) implementing a robust incident detection capability. We will discuss how the program aligned around key areas of focus and used risk based decisions to document, expand and mature their information security program. First starting with a single large federated institution, then expanding security initiatives across a university system and the broader state. We will review toolsets that allow automation and expansion of activities to maximize resources as well as provide data driven indicators that demonstrate risk reduction over time.

PLATINUM SPONSOR: SALTY CLOUD