{"id":863,"date":"2020-04-28T10:09:41","date_gmt":"2020-04-28T15:09:41","guid":{"rendered":"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/?page_id=863"},"modified":"2025-02-20T16:08:35","modified_gmt":"2025-02-20T21:08:35","slug":"ad-hoc-risk-assessments","status":"publish","type":"page","link":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/","title":{"rendered":"Ad Hoc Security Risk Assessments"},"content":{"rendered":"    <section class=\"cc--component-container cc--hero-basic bg-image  hero-basic\">\n\n<div class=\"c--component c--hero-basic\">\n                <div class=\"background-image hero-bg-image \" style=\"background-image: url(https:\/\/it.rutgers.edu\/information-security\/wp-content\/uploads\/sites\/47\/2020\/06\/Canva-Silver-Laptop-Computer-Showing-Pie-Graph-scaled.jpg);\" aria-label=\"Image Description\">\n            <div class=\"f--image--hidden\">\n\t\t\t\t<div class=\"f--field f--image \">                <img decoding=\"async\" src=\"https:\/\/it.rutgers.edu\/information-security\/wp-content\/uploads\/sites\/47\/2020\/06\/Canva-Silver-Laptop-Computer-Showing-Pie-Graph-scaled.jpg\" alt=\"\">\n\t\t\t<\/div><!-- f--field f--image -->\n            <\/div>\n        <\/div>\n\t\n<div class=\"outer-wrapper\">\n    <div class=\"inner-wrapper\">\n        <div class=\"text-container\">\n            <div class=\"text-wrapper\">\n\t\t\t\t<div class=\"f--field f--page-title \"><h1>Ad Hoc Security Risk Assessments<\/h1>\n\n<\/div><!-- f--field f--page-title -->\n\t\t\t\t<div class=\"f--field f--text \"><p><strong><a href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNjE5SERERlNaSFBMNkE2MjNWQlRKWlBJVSQlQCN0PWcu\" target=\"_blank\" rel=\"noopener\">Request an Ad Hoc Security Risk Assessment<\/a><\/strong><\/p>\n<\/div><!-- f--field f--text -->\n            <\/div>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<\/div><!-- c--component c--hero-basic -->\n\n    <\/section><!-- cc--component-container cc--section -->\n\n\n    <div class=\"cc--component-container cc--secondary-navigation  secondary-navigation\">\n\n<div class=\"c--component c--secondary-navigation\">\n        <div class=\"cc--secondary-header\">\n    <div class=\"c--secondary-header\">\n        <div class=\"secondary-nav-container\">\n            <div class=\"branding-secondarymenu-container\">\n                <div class=\"branding-secondarymenu-container-inner\">\n                    <div class=\"inner-wrapper\">\n                        <div class=\"cc--component-container cc--secondary-menu\">\n                            <div class=\"c--component c--secondary-menu\">\n                                <nav class=\"mc--menu mc--secondary-nav\">\n                                    <ul class=\"m--menu m--secondary-nav\">\n                                                                                            <div class=\"link-arrow-wrapper\">\n                                                        <button type=\"button\" class=\"has-submenu arrow-toggle\" aria-expanded=\"false\" aria-haspopup=\"true\" aria-label=\"Display Sub Menu for Apply\">\n                                                            <svg\n                                                                    xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n                                                                    x=\"0px\" y=\"0px\"\n                                                                    viewBox=\"0 0 20 11.7\" enable-background=\"new 0 0 20 11.7\"\n                                                                    xml:space=\"preserve\"\n                                                            >\n          <path d=\"M10,8.3L18.3,0L20,1.7l-10,10L0,1.7L1.7,0L10,8.3z\"><\/path>\n        <\/svg>\n                                                        <\/button>\n                                                    <\/div>\n                                                    <li class=\"menu-item\">\n                                                        <a\n                                                                href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/\"\n                                                                data-drupal-link-system-path=\"node\/84\"\n                                                        >\n                                                            Rutgers Risk Management Program                                                        <\/a>\n                                                        <div class=\"submenus-wrapper\">\n                                                            <div class=\"submenus-wrapper-inner\">\n                                                                <ul class=\"submenu\" aria-hidden=\"true\">\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/third-party-risk-assessments\/\">Third Party Vendor Risk Assessments<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/application-risk-assessments\/\">Application Risk Assessments<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/\">Hybrid Entity Risk Assessments<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNVdQSVBNRjZMVFhHSFo5SThXVzkyNVdWMCQlQCN0PWcu\">Third Party Vendor Recertification<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/ad-hoc-risk-assessments\/\">Ad Hoc Security Risk Assessment<\/a>\n                                                                        <\/li>\n                                                                                                                                    <\/ul>\n                                                            <\/div>\n                                                        <\/div>\n                                                    <\/li>\n                                                                                        <\/ul><!-- m--menu -->\n                                <\/nav>\n                            <\/div><!-- c--component c--secondary-menu -->\n                        <\/div><!-- cc--component-container cc--secondary-menu -->\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n        <div class=\"secondary-mobile-nav\">\n\n            <div class=\"mobile-nav-topbar-container\">\n\n                <h2>\n                    Navigate to\n                    <span class=\"arrow-wrapper\"><svg\n                                xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"8\"\n                                viewBox=\"0 0 12 8\"\n                        ><g><g><path\n                                            d=\"M.936.5l4.95 4.95L10.835.5l1.06 1.06-4.95 4.95-1.06 1.061-1.061-1.06-4.95-4.95z\"\n                                    ><\/path><\/g><\/g><\/svg><\/span>\n                <\/h2>\n            <\/div>\n            <div class=\"secondary-mobile-nav-menu-container\">\n                <div class=\"cc--component-container cc--secondary-menu color-red\">\n                    <div class=\"c--component c--secondary-menu\">\n                        <nav class=\"mc--menu mc--secondary-nav\">\n                            <ul class=\"m--menu m--secondary-nav\">\n                                                                            <li class=\"menu-item\">\n                                                <div class=\"link-arrow-wrapper\">\n                                                    <a href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/\" target=\"_self\">\n                                                        Rutgers Risk Management Program                                                    <\/a>\n                                                    <button\n                                                            type=\"button\" class=\"has-submenu arrow-toggle\" aria-expanded=\"false\"\n                                                            aria-haspopup=\"true\" aria-label=\"Display Sub Menu for Rutgers Risk Management Program\"\n                                                    >\n                                                        <svg\n                                                                version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n                                                                x=\"0px\" y=\"0px\"\n                                                                viewBox=\"0 0 20 11.7\" enable-background=\"new 0 0 20 11.7\"\n                                                                xml:space=\"preserve\"\n                                                        >\n                      <path d=\"M10,8.3L18.3,0L20,1.7l-10,10L0,1.7L1.7,0L10,8.3z\"><\/path>\n                    <\/svg>\n                                                    <\/button>\n                                                <\/div> \n                                                <div class=\"submenus-wrapper\">\n                                                    <div class=\"submenus-wrapper-inner\">\n                                                        <ul class=\"submenu\" aria-hidden=\"true\">\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/third-party-risk-assessments\/\">Third Party Vendor Risk Assessments<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/application-risk-assessments\/\">Application Risk Assessments<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/\">Hybrid Entity Risk Assessments<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNVdQSVBNRjZMVFhHSFo5SThXVzkyNVdWMCQlQCN0PWcu\">Third Party Vendor Recertification<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/ad-hoc-risk-assessments\/\">Ad Hoc Security Risk Assessment<\/a>\n                                                                <\/li>\n                                                                                                                    <\/ul>\n                                                    <\/div>\n                                                <\/div>\n                                            <\/li>\n                                                                    <\/ul><!-- m--menu -->\n                        <\/nav>\n                    <\/div><!-- c--component c--secondary-menu -->\n                <\/div><!-- cc--component-container cc--secondary-menu -->\n            <\/div>\n        <\/div>\n    <\/div><!-- c--component c--secondary-header -->\n<\/div><\/div><!-- c--component c--secondary-navigation -->\n\n    <\/div><!-- cc--component-container cc--div -->\n\n\n    <section class=\"cc--component-container cc--heading-description vertical  heading-description color-white\">\n\n<div class=\"c--component c--heading-description\">\n        \n<div class=\"inner-wrapper\">\n    <div class=\"text-container\">\n\t\t        <div class=\"cta-container\">\n\t\t\t<div class=\"f--field f--description \"><h2><strong>The purpose<\/strong><\/h2>\n<p>Rutgers Risk, Policy and Compliance Ad Hoc Security Risk Assessment is an improvisational approach to risk management and seeks to analyze security and control gaps by applying industry standards and frameworks. The outcomes of ad hoc analysis are generally in the form of reports, data summaries, or a statistical models.<\/p>\n<p>Ad hoc security risk assessments include risk assessments, security reviews, contract reviews, data use agreement reviews,<a href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UQ1BJTzQ0TEM1NFVKRzBDM1Y2VkdISjRROCQlQCN0PWcu\" target=\"new\" rel=\"noopener noreferrer\">\u00a0<strong>c<\/strong><strong>loud access reviews<\/strong><\/a>, and risk &amp; security projects.<\/p>\n<h2><strong>The process<\/strong><\/h2>\n<p>The objective of ad hoc risk assessments is to understand the existing system and environment and identify risks through analysis of the information\/data collected. By default, all relevant information should be considered and includes:<\/p>\n<ul>\n<li>Review the adequacy of existing security policies, standards, guidelines, and procedures.<\/li>\n<li>Analyze assets, threats, and vulnerabilities, including their impacts and likelihood.<\/li>\n<li>Map threats to assets and vulnerabilities to help identify their possible combinations. Each threat can be associated with a specific vulnerability or even multiple vulnerabilities. Unless a threat can exploit a vulnerability, it is not a risk to an asset.<\/li>\n<li>Develop practical technical recommendations to address the vulnerabilities identified and reduce the level of security risk.<\/li>\n<li>Produce and submit a risk assessment report.<\/li>\n<\/ul>\n<\/div><!-- f--field f--description -->\n<div class=\"f--field f--link \">\n<a\n        class=\"button\"\n\t        href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNjE5SERERlNaSFBMNkE2MjNWQlRKWlBJVSQlQCN0PWcu\"\n\t\t\t target=\"_blank\"\t\t>Request an Ad Hoc Security Risk Assessment<\/a>\n\n<\/div><!-- f--field f--link -->\n        <\/div>\n    <\/div>\n<\/div>\n<\/div><!-- c--component c--heading-description -->\n\n    <\/section><!-- cc--component-container cc--section -->\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":992,"featured_media":0,"parent":647,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"page-category":[],"class_list":["post-863","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ad Hoc Security Risk Assessments - Information Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ad Hoc Security Risk Assessments - Information Security\" \/>\n<meta property=\"og:url\" content=\"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/\" \/>\n<meta property=\"og:site_name\" content=\"Information Security\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-20T21:08:35+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/ad-hoc-risk-assessments\\\/\",\"url\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/ad-hoc-risk-assessments\\\/\",\"name\":\"Ad Hoc Security Risk Assessments - Information Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/#website\"},\"datePublished\":\"2020-04-28T15:09:41+00:00\",\"dateModified\":\"2025-02-20T21:08:35+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/ad-hoc-risk-assessments\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/ad-hoc-risk-assessments\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/ad-hoc-risk-assessments\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Information Security\",\"item\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rutgers Risk Management Program\",\"item\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Ad Hoc Security Risk Assessments\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/#website\",\"url\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/\",\"name\":\"Information Security\",\"description\":\"A Rutgers IT Service\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ad Hoc Security Risk Assessments - Information Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/","og_locale":"en_US","og_type":"article","og_title":"Ad Hoc Security Risk Assessments - Information Security","og_url":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/","og_site_name":"Information Security","article_modified_time":"2025-02-20T21:08:35+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/","url":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/","name":"Ad Hoc Security Risk Assessments - Information Security","isPartOf":{"@id":"https:\/\/it.rutgers.edu\/information-security\/#website"},"datePublished":"2020-04-28T15:09:41+00:00","dateModified":"2025-02-20T21:08:35+00:00","breadcrumb":{"@id":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/ad-hoc-risk-assessments\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Information Security","item":"https:\/\/it.rutgers.edu\/information-security\/"},{"@type":"ListItem","position":2,"name":"Rutgers Risk Management Program","item":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/"},{"@type":"ListItem","position":3,"name":"Ad Hoc Security Risk Assessments"}]},{"@type":"WebSite","@id":"https:\/\/it.rutgers.edu\/information-security\/#website","url":"https:\/\/it.rutgers.edu\/information-security\/","name":"Information Security","description":"A Rutgers IT Service","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/it.rutgers.edu\/information-security\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/863","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/users\/992"}],"replies":[{"embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/comments?post=863"}],"version-history":[{"count":34,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/863\/revisions"}],"predecessor-version":[{"id":4421,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/863\/revisions\/4421"}],"up":[{"embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/647"}],"wp:attachment":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/media?parent=863"}],"wp:term":[{"taxonomy":"page-category","embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/page-category?post=863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}