Department of Corrections and Rehabilitation - Operations Manual

Chapter 4 – Information Technology

Article 46 – Information Systems Risk Management

Revised April 16, 1993

All ITS within the Department are subject to having a risk analysis prior to any approval or authorization for development or implementation. The result of this analysis, “The Risk Analysis and Risk Reduction Report,” shall be submitted as part of the request for approval. This report is a part of the feasibility study for large systems, and stand-alone facilities within small systems. A multipurpose work station is exempt from this requirement unless there is a need for a modem or to store confidential or sensitive information.