IRPC F & A 031516

CURRENT INFORMATION SECURITY TOOLS/STRATEGIES • SUNY Information Security Guidelines, Document # 6608, February 1, 2008 A. Establish Program Organization B. Declare Campus Policy and Standards

C. Create and Maintain Risk-Oriented Inventories D. Conduct Analysis of Risk, Practices and Protections E. Improve and Maintain Practices and Protections