Why can’t the HSC Information Security Office make the risk decision?
There isn’t just one risk decision; there would be several hundred. The risk varies depending upon the role the faculty or staff member performs, the amount of Restricted data they handle, their personal decision to use a personally owned computer, and the type of access they are using to get to Restricted information on HSC campus. One broad decision by the HSC Information Security Office just doesn’t fit this scenario.
