The IT Risk Assessment service helps University business units to identify gaps in its information management practices, and offers advice on how to improve its processes.