IT Security, Risk & Compliance Subcommittee

The primary role of the Western University of Health Sciences IT Security, Risk & Compliance Subcommittee is to provide oversight and direction for the effective, efficient, integrated, and innovative use of administrative and operational technologies at the institution. The committee will develop and maintain a strategic vision and plan for the advancement of administrative and operational technologies at WesternU from an institutional, rather than unit perspective. The committee will be client-driven, with IT playing an advisory and support role.

Typical responsibilities of the IT Security, Risk & Compliance Subcommittee will include assessing current and evaluating proposed IT security measures, providing strategic IT security project portfolio prioritization and resource allocation recommendations, responding to and investigating IT infrastructure and/or data breaches, identifying gaps, deficiencies, and risks in IT security infrastructure and processes, forming and overseeing ongoing and ad-hoc work-teams to address specific issues, and reviewing and developing relevant metrics, Key Performance Indicators (KPIs), policies and procedures.

The IT Security, Risk & Compliance Subcommittee will be composed of representatives from each of the support units involved in IT-related security, risk, and compliance at the institution.