Corrective action plan: To ensure compliance is being met with Risk Assessments, the Chief Information
Security Officer (CISO) will implement regular compliance reviews, at the beginning of each quarter with Program
Director level leadership. Any non-compliance will be addressed with the Program are...
Corrective action plan: To ensure compliance is being met with Risk Assessments, the Chief Information
Security Officer (CISO) will implement regular compliance reviews, at the beginning of each quarter with Program
Director level leadership. Any non-compliance will be addressed with the Program area by regularly sharing email
reminders for reporting, training, and assistance from security.
The reports will begin to be shared on July 31, 2024.
Application Services, in collaboration with the CISO and the Information Technology (IT) Business Operations’
Policy, Planning, and Performance team, will establish and publish a process for the successful completion of
Risk Assessments, including roles and responsibilities, processes, and procedures to ensure timely completion
and ongoing compliance.
The target implementation date for this document is January 15, 2025.
Implementation date: January 15, 2025
Responsible persons: Leatha Marr, Director, IT Applications Services, and Vikram Muralidharan, Chief
Information Security Officer