flowchart TD
    Start["Start Evaluation"] --> Purpose["Is it specific-purpose software?"]
    Purpose -- Yes --> Proprietary["Is it proprietary software?"]
    Purpose -- No --> Source["Is the software proprietary?"]

    Proprietary -- Yes --> Developer["Was it developed by researchers (not professional engineers)?"]
    Proprietary -- No --> Installation["Was the software installed by a user independently?"]

    Source -- Yes --> Installation
    Source -- No --> Installation

    Developer -- Yes --> HighRisk["High Risk"]
    Developer -- No --> DataSensitive["Does it process highly sensitive data?"]

    Installation -- Yes --> Maintenance["Is the software infrequently updated or maintained?"]
    Installation -- No --> DataSensitive

    DataSensitive -- Yes --> HighRisk
    DataSensitive -- No --> Deployment["Is it deployed on the cloud without clear security assurance?"]

    Maintenance -- Yes --> HighRisk
    Maintenance -- No --> Deployment

    Deployment -- Yes --> MediumRisk["Medium Risk"]
    Deployment -- No --> UsageScope["Is the software widely used university-wide?"]

    UsageScope -- Yes --> MediumRisk
    UsageScope -- No --> LowRisk["Low Risk"]