Risk management

The process of evaluating and responding to risks to University information for the purpose of reducing those risks to acceptable levels. Risk management is inclusive of the risk assessment process, and uses the results of risk assessments to make decisions on the acceptance of risk or on taking action to reduce risk.