End of Support (Server) Questionnaire EOL-Risk1.1.0 General Information - Owner(s)/Sponsor Questionnaire Owner Name * Title * Contact Number * Email * Date Completed * Data Owner Name * Contact Number * Business Owner/Sponsor Use "Add" button below if there is more than one. Name * Contact Number * Email * Add Remove Preliminary Security Information What is the name of the asset? * What is the asset? * What is the asset used for? * What is the OS on the asset? * (include version and service pack information.) Who is the owner(s) of the asset? * What physical access controls to the asset are in place? Follow up #1: Is it stored in a secure data center? * Yes No Follow up #2: Is it stored in a locked office? * Yes No Follow up #3: Who has physical access to the asset? * Can the asset be patched/upgraded to a modern OS? * Yes No If no, please explain. * Does the asset support a native firewall? * Yes No Does the asset have anti-virus protection? * Yes No Is the asset used to browse the internet/check email? * Yes No (includes logging onto the universities web mail) Is the asset in a domain? * Yes No If yes, which one? * Can the asset be accessed from internet (external network)? * Yes No Can the asset be accessed from Wucon? * Yes No Can the asset be accessed from WU Public Network? * Yes No Mitigation Information Can the asset be retired? * Yes No If yes, when will it be retired? * If no, why? * Can the asset be replaced? * Yes No If yes, when will it be replaced? * If no, why? * Can the asset be air gapped (no network connectivity whatsoever)? * Yes No If no, why? * Exceptions Information Is the asset connected to any high-value peripherals? * Yes No If yes, What is the value of the peripheral? * See the instruction below High Value Peripheral Examples: Machinery (i.e. backup generator) Scientific instrument (i.e. electron microscope, gene sequencer, etc.) Control system (i.e. building environmental controls) Ways to Value a Peripheral: The inherent value of the peripheral (what would it cost to replace in the event of a total loss) The value to remediate and repair the asset if compromised (reinstall OS, software) Value of data collected by the peripheral (if you lose the peripheral how much is its non-functionality costing you/your department/the university per day/week/month/year). Value of data that would not be accessible if the asset/peripheral were lost. Value of the asset/peripheral operators time. How much time would the operator normally spend on the asset/peripheral? Does the asset have ePHI or PII stored on it? * Yes No Does the asset have access to a file share with ePHI or PII? * Yes No Does the asset support encryption? * Yes No Additional Information reCAPTCHA If you are human, leave this field blank. This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Submit