Yale University's Information Security Design Review Process for Applications

Yale University's IT Security Design Review is a formal methodology and process for assessing applications that are proposed or in the acquisition or early design phase. The initial criteria for assessment were new projects critical to the university or those with restricted and/or confidential data. Now major upgrades or existing systems and systems outside central IT may also have security design reviews.