Information Security Risk Management (ISRM) Assessment
The Information Security Risk Management (ISRM) Assessment
The University of Virginia is committed to preventing incidents that may impact the confidentiality, integrity, and availability of information and IT resources. In accordance with the Information Security of University Technology Resources policy, all units and departments are required to complete an annual information security risk assessment (ISRM) to evaluate the effectiveness of their IT security controls within their environments.
Just like last year, we also have a template available to help you with the inventory questions:
How do I access this year's assessment?
The 2026 Information Security Risk Management (ISRM) will be available March 16th and will be due by close of business on May 1st, 2026. You will receive an email from Isora when your unit’s ISRM has been launched.
Please download step-by-step instructions on How to Access and Complete an ISRM here.
Once IT Compliance has completed the review of your ISRM, you will receive an email from Isora.