ChemIT has posted resources to help research groups conduct IT risk assessment:

https://confluence.cornell.edu/x/x5IoDg

ChemIT welcomes you contacting us as you begin any IT assessment. By us learning what you are doing we can further help other groups. And we also have experience and knowledge we would like to share with you, above and beyond our posted outline.