Stop Collecting Risk, Start Managing It: Operationalizing the Risk Register

Wednesday, April 29, 2026 | 1:30PM–2:00PM PT | Pacific Ballroom A, Second Floor
Session Type: Breakout Session
Delivery Format: Demonstrations
Digital threats facing Higher Education Institutions (HEIs) continue to grow in complexity within an increasingly data-driven society. At the same time, HEIs are expected to manage risk at scale while operating with minimal staffing and constrained resources, often resulting in manually managed risk registers that provide limited visibility and effectiveness. Arizona State University (ASU) will demonstrate how it has designed and operationalized a resilient IT risk register, highlighting the conceptual foundations, supporting business processes, and governance structures that enable transparency and accountability. The demonstration will serve as the centerpiece of the session, with facilitated discussion woven throughout to encourage participant questions, shared experiences, and exchange of practical lessons to strengthen IT risk management.

Presenters

  • Ali Abdel-Fattah

    Information Security Specialist, Sr., Arizona State University

  • Benjamin Bailey

    Senior Cybersecurity Analyst, Arizona State University

Resources & Downloads

  • Stop Collecting Risk Start Managing It Operationalizing the Risk Register

    Updated on 4/21/2026