Re: 3rd Party conducted Risk Assessment

[Kathy Bergsma <kbergsma () UFL EDU>]

Here's a good EDUCAUSE resource on risk consultants.  Consider amending
the site with your vendor experiences.

https://wiki.internet2.edu/confluence/display/itsg2/Information+Security+Risk+Assessment+Consultants

Myers, Julie wrote:
> We have been considering engaging a consultant to conduct a University
> wide Risk Assessment.  We are currently the process of collecting
> reference from these vendors.  I was wondering if any of you have gone
> down this path and your perception on the value add of doing so.
>
> Thank you,
>
> Julie Myers
> Chief Information Security Officer
> University of  Rochester - University IT
> julie.myers () rochester edu
> p: 585.273.1804  c: 585.208.0939
> P Think twice before you print
>
>  CONFIDENTIALITY: This email (including any attachments) may contain
> confidential, proprietary and privileged information, and unauthorized
> disclosure or use is prohibited. If you received this email in error,
> please notify the sender and delete this email from your system. Thank
> you.

--
Kathy Bergsma
UF Information Security Manager
352-273-1345