Below you will find the steps to follow for collecting and submitting your Technology Risk Assessment Committee (TRAC) documentation for review.
Do you need to fill out and submit a TRA Form?
The following questions can guide you (note: even answering yes on one question may trigger the need for a TRA submission):
Receiving Information From Your Vendor
If applicable, your vendor might be the best place to start for gathering the required information, specifically information of a technical orientation.
Please send the Vendor Information PDF document (found in the left-hand menu system) to your vendor and have them send back to you completed. You will use the information in this form in the next step.
Filling Out the Form
Please use the TRA Submission (found in the left-hand menu system) link to provide your solution's information.
The information in this form will be information that your team can provide in terms of name of initiative, description, impact, nature of data, etc. You will need to have your vendor provide certain components for you as questions become more technical (if applicable).
Please be as specific as possible.
There are opportunities within the form to upload attachments, etc.
There are 6 major categories of information:
Submit the Form
Please fill out all of the relevant fields in the form and include the information provided from the vendor (if applicable, the sections and fields of the PDF filled out by the vendor will directly correspond to sections in the webform). Please feel free to cut and paste.
When finished, please use the SUBMIT button, you will receive a thank you message with the details of your submission. A member of the TRAC will follow up shortly thereafter to confirm all information has been received.
There may be some follow up in terms of clarification and/or to obtain other documents.
Process Following Submission
The TRAC will receive the submission and will develop a document to articulate any potential risks to the application and/or solution at Western. Depending on the complexity of the solution, the TRA Group may need to engage in a meeting to discuss in more details (the TRA Group meets every second Tuesday AM to discuss submissions).
A typical timeline associated with this process is approximately 2-4 weeks.
You will receive a report of the submitted information shortly following the conclusion of the assessment.
Published on and maintained in Cascade CMS.