The University of Arizona (UArizona) Information Security Office has pioneered the development and implementation of a federated information security risk management program that successfully identifies risk to the university and its academic and research mission and provides units with achievable risk mitigation goals. Attendees will learn how UArizona has built a successful program through the following: training and team-building exercises for unit risk managers; consultations with information security experts; a new, automated federated cyber-risk management platform; gamification of the annual risk management cycle that incentivizes security plan completion and recognizes achievements of units and their risk managers; and providing campus leadership with an annual report, tracking institutional security posture and progress.
