Training Videos & Resources

Resources

This information sheet provides an overview of the program.
DAI-IRSA Information Sheet

Refer to the CMM Scoring sheet and the descriptions of risk strategies while you are completing the assessment.
Capability Maturity Model Scoring Sheet
Risk Strategy Descriptions

---

Video Tutorials

These videos are designed to help you get started with your Unit Data Asset Inventory and Information Risk Self-Assessment. For help obtaining an account or accessing the assessment tool, visit the Inventory and Assessment Tool page.

Data Asset and Information Risk Concepts

Excerpted from the DAI-IRSA Launch during Cybersecurity Awareness Month, this video explains some background concepts in data assets and information risk.

---

DAI-IRSA Fundamentals

New to the Self-Assessment Program? This fundamentals video will walk you through the basics: from accessing the survey tool to recording your data assets, scoring risk areas and recording your plans towards reducing information risk in your organization.

---

Capability Maturity Model, a Standard Method for Scoring

The IRSA uses a Capability Maturity Model (CMM) to assist you in assessing and scoring your unit’s activities around information risk and data access protocols. Watch this video to learn how CMM can be applied to the U of T Information Risk Areas.

Capability Maturity Model Scoring Sheet

---

Risk Strategies and Plans

A key component to an Information Risk Management Program are the strategies you use to address risk and the plans for implementing those strategies. This video will explain the common strategies used in information risk management, and walk through some scenarios and example plans.

Risk Strategy Descriptions

---

University Partnerships and Shared Responsibility

We’re all in this together! Many units at the University use the services of other units to support the management of their systems and programs. This video addresses the ways in which units can describe and document these linkages, and the concept of shared responsibility between clients and service providers.

---