3rd Party conducted Risk Assessment

["Myers, Julie" <julie.myers () ROCHESTER EDU>]

We have been considering engaging a consultant to conduct a University
wide Risk Assessment.  We are currently the process of collecting
reference from these vendors.  I was wondering if any of you have gone
down this path and your perception on the value add of doing so.  

Thank you, 

Julie Myers 
Chief Information Security Officer 
University of  Rochester - University IT
julie.myers () rochester edu  
p: 585.273.1804  c: 585.208.0939  
P Think twice before you print

 CONFIDENTIALITY: This email (including any attachments) may contain
confidential, proprietary and privileged information, and unauthorized
disclosure or use is prohibited. If you received this email in error,
please notify the sender and delete this email from your system. Thank
you.