| As part of our ongoing efforts to help you maximize budgets through the strategic purchase of goods and services, and to minimize risk to the University, we’re reminding you about the requirement that all information technology acquisitions and renewals must be reviewed by IS&T prior to contracting to ensure compliance with BU security and system standards.
Security Review & Contract Request
If you are contemplating using a vendor that will process, store, use, modify, access, copy, or transmit data, please request a Vendor Security Review. For new services, please attach the unsigned contract, quotation, or proposal along with the vendor’s SOC 2 and/or HECVAT report . For contract renewals, the SOC 2 and HECVAT documents are not required, just the submitted review form.
When the security review is complete, you will receive a Cyber Risk Assessment and Management form that identifies any risks or required actions. Next, submit a Contract Request Form in Ariba; Procure to Pay will prepare the contract for signature. Please note, contracts may only be signed by university leaders with Delegated Signature Authority (typically, Chris Sedore, Derek Howe, Nicole Tirella, and Randall Moore).
Purchase Consultation
Consulting with IS&T first, before engaging a vendor, can significantly speed deployment and may result in savings, since the University may already be providing or negotiating a contract for a needed service. This process protects University’s assets, reduces the risk of costly security incidents, and helps ensure financial resources are used efficiently. We are here to partner with and advise you on these initiatives.
Want to start the conversation? Contact your IS&T Relationship Manager/Primary Responder or complete the New Technology Engagement Request form.
For additional questions about the goal and approach to this effort, please do not hesitate to contact the IT Help Center at ithelp@bu.edu or 617-353-HELP(4357).
Sincerely,
Chris Sedore
Vice President, Information Services & Technology and Chief Information Officer
and
Randall Moore
Associate Vice President, Sourcing & Procurement and Chief Procurement Officer |