csp-it-rep-Scope of Assessment

 

Scope of Assessment


 

A. Department

Please state the name of the Unit (e.g. Department/Faculty/Administrative Unit) the answers you will be providing for this self-assessment questionnaire.




 

B. Scope of Control

Are all of the systems managed within the unit you represent, under your control?


Control or Process Description​

For the purposes of this self-assessment, consider UBC Electronic Information and Systems under your control to be those services and systems delivered or provisioned for, or managed by, your unit, e.g. a computer program or a device that provides a service to another computer program and/ or users; tools that administer and manage technology and data.

This DOES NOT include centrally supported services for broad UBC use, e.g. Workday, Team-share, OneDrive, Microsoft Teams.

This DOES include UBC Information Services and components (e.g. virtual servers, Software as a Service, developed applications or infrastructure services) provisioned for your unit.

UBC Information Services are an integrated set of components for collecting, storing, and processing data and for providing information, to obtain a desired outcome. They are usually comprised of multiple UBC Systems (e.g. servers, applications, endpoint devices etc.).


Instructions​

Usually, we would expect all the UBC Information Services within a unit to be under the control of the Administrative Head of Unit, however if this is not the case in your unit, this question is intended to help you scope your response.

Control in this context means you are ultimately accountable for funding, decision making and risk management associated with the system.


What is Acceptable?

For this question, if a system within your unit is not under your control, the minimum expectation is that they are identified, and the owner is established.