Third-Party Security Risk Assessments

A third-party risk assessment is required of any system or service, managed by a third-party, that stores, processes, or transmits Ohio State institutional data. The purpose of the assessment is to identify risks of utilizing the cloud service and recommend controls that might mitigate or reduce these risks.