This policy provides risk assessment requirements for Ohio Department of Administrative Services (DAS)-managed system assets. The requirements address preparing for, conducting, communicating and maintaining a risk assessment.