The University is using SaltyCloud’s Isora product to handle Governance, Risk and Compliance (GRC) assessments. Notifications about these assessments come from admin@mst.isora.saltycloud.com and the assessments can be accessed at https://mst.isora.saltycloud.com. The login uses your University account through a Microsoft login page (currently login.microsoftonline.com). In order to be able to login to the system your account must first be enabled in Isora. To address issues with accessing Isora enter a help ticket.
Admin Delegate Program
After logging in to Isora click the “Assessment” tab in the top bar to see open and completed assessments. The Admin Delegate Program uses the “Non-IT Admin Assessment”. The “>” can be clicked to disclose the available assessments in that category. Each assessment consists of two portions: host categorization and unit questions. For open assessments there is a link for each that will initially read “In Progress”. Clicking the link will open that portion of the assessment.
Host Categorization
Each host must be categorized as to the Data Classification Level (DCL) that it will house. The definitions for these are available at this link. To avoid accidental changes a host can be “locked” and all host fields can be locked using the “Lock All” button. When done click the “Save All” and “Lock All” buttons.
When selecting a DCL level then applicable caveats can be selected. For example, public information is DCL1 but it may be required to adhere to accessibility standards. If that is the case then DCL1-Accessibility must be chosen. If no caveats apply then the appropriate “default” option must be selected. For example, when classified as DCL1 but the data and system are not subject to accessibility standards then choose DCL1-Default.
Unit Questions
There are a series of questions to document the circumstances for the admin delegate grant. Each question is intended to have sufficient context to permit answering it, but additional information is available by clicking the blue “?” icon for the question. After a question has been answered click the “Lock” button to avoid accidentally altering the answer. It can always be unlocked if it needs to be changed. When done click the “Save All” button.