Security Planning Assessment replaces Security Design Review process on March 8

March 4, 2021

On Monday, March 8, Yale’s Information Security Office is introducing a new process. The Security Planning Assessment (SPA) is the new way to ensure the security of Yale IT Systems. The SPA process will replace the existing Security Design Review (SDR) process. The new process advances an ITS goal of becoming a standards-based organization. The SPA centers around Yale’s Minimum Security Standards (MSS).


  • reduces paperwork
  • streamlines application of appropriate security controls
  • confirms a plan to maintain security for the life of the system
  • educates individuals on their responsibility to maintain alignment with the MSS

For more details on this new process, visit the SPA webpage. For questions or concerns, please email