Skip to content

Risk Assessment

If you are requesting a new PUBAPPS or PRIVAPPS instance a UF risk assessment of the web application / project is required before the web hosting instance and the first hosting VM can be set up for your group. Since our web hosting infrastructure has been risk assessed most new group web hosting instances will only need to submit a UFIT Research Computing Web Hosting Instance Request Form. We will attach the resulting form to the main PUBAPPS Risk Assessment.

Individual Risk Assessment Submission

In some cases RC will determine that the nature of the group's project requires a submission (start) of an individual UF risk assessment. If an individual RA is requested you will have to provide us with the number of the started RA in the instance setup support ticket.

The UFIT Risk Assessment can be submitted by clicking on the Access the UF Integrated Risk Management System link on the UFIT Risk Assessment page.

Service Diagrams

Please use the appropriate service diagram for the RA submission:

PubApps

UFIT Research Computing PubApps Instance Diagram

PrivApps

UFIT Research Computing PrivApps Instance Diagram

Getting Help

If you need help with your Risk Assessment please contact Justin Richardson at UFIT Research Computing or submit a Support Request

Submitting a Risk Assessment

Below are the examples and screenshots of the critical parts of a risk assessment that need to be filled out correctly for the RA to be categorized quickly, so we could proceed with the setup of the web VM.

General Information

  • Submitter: your name
  • Project Name: PubApps instance for GROUP group
  • Project Owner: Group sponsor's name
  • Technical Resource: "Moskalenko, Oleksandr"

Critical Steps

The following three sections must be filled out correctly to allow for speedy RA classification.

Data Classification

  • Classify your data according to the UF Data Classification Guide

  • Select the data type

    • If the data is not regulated check the sensitive or open data type as appropriate or both.
    • If you use a regulated data type please check all relevant data type(s).

  • Note, if you select the 'Other' data type the classification will be delayed as the staff will contact you for a review of the data type(s).

Do not select the '[] Other' checkbox. This will delay the classification.

'Data Classification' section

Activity Types

Specify the project's activity type. For sensitive and open data the selection is likely to be 'Research'.

Activity Types

Uses and Disclosures

Specify the Uses and Disclosures of data. In most cases you will select 'No' in this list.

Uses and Disclosures

Submit the Risk Assessment and post the RA number into the RCSupport ticket opened for the setup of the hosting instance.