Number: 
Creation Date:  2017-10-13
Category:  Risk Management
Effective Date:  2017-10-13
Type:  Processes
Last Reviewed:  2024-10-31
Version:  October 2024
Scheduled Review Date: 2026-10-31
Security Classification:  Protected A
Status:  Approved

Description:
Please note that information classified as Protected (per the Data and Information Security Classification standard) is only accessible to Government of Alberta Employees. External users are therefore not able to download this document. To request access, please contact us: imt.policy@gov.ab.ca.

Process for tracking and managing the STRA lifecycle. Security Threat and Risks Assessments (STRA) must be conducted for all new IT systems and for substantial updates to existing systems.​


Keywords: cybersecurity, risk assessment, risk management, STRA