Office of Information Security

A MESSAGE FROM TOM 

1516628692929.jpg

Hello, and thank you for taking a few minutes to check out the GRC Team’s subsection of the OIS website!

It’s said that “an ounce of prevention is worth a pound of cure.” At OSU, we treat Governance, Risk, and Compliance (GRC) as the ounce of prevention that stops information security problems before they have a chance to arise. GRC typically focuses on categorizing information, determining which security controls should be implemented to protect that information, and then verifying that those security controls have been properly implemented. With regard to the many types of information used by members of the OSU community, our team’s efforts prioritize the protection of information that carries regulatory mandates, such as Personally Identifiable Information (PII), Personal Health Information (PHI), and Controlled Classified Information (CUI).

Additionally, our team’s focus on risk management involves a great deal of consulting, from discussions with professors to ensure that confidential research data is appropriately protected, to meetings with engineering teams to improve the security architecture of OSU’s networks. We also administer OSU’s efforts to manage vulnerabilities, configurations, and third party technology vendors. Since OSU’s operations are as diverse as those of a small city, the GRC Team finds itself supporting a wide variety of departments, programs, and initiatives!

We invite you to review our webpage, and contact us if we can be of any assistance in the fields of risk management, security compliance, vulnerability or configuration management, vendor security management, research security support, or security awareness.