Preparing for an IT Compliance Review

A Guide for Educators

Introduction

Welcome to the IT Compliance Review Preparation Guide for Educators. This page provides essential information to help you prepare for an IT compliance review, specifically for those ordering {a thing or something}

Required Information

Software Tools and Services

  • List of Tools and Services: Provide a detailed list of all educational tools and services you plan to use in your classes.
  • Licensing Information: Include details about licenses, including expiration dates and compliance with licensing agreements.
  • Use Case: Provide your intended use case for the software at a level anyone could understand.
  • Utilization Information: Provide which classes and the number of students that will be utilizing this software or service.
  • Deployment Details: Ensure that you specify how you would like software deployed (CLCs, Personal computers, teaching lab, etc)
  • Integration Details: Ensure that all tools and services are compatible with Canvas and/or SSO integration.
  • Semesterly Survey: Complete the Semesterly survey from IT Learning Environments to request any software you need for the following semester.

Vendor Information

  • Vendor List: Provide a list of all vendors supplying your tools or services, including contact information for representatives that you have been working with and the services/products they provide.
  • Contracts and Agreements: Include copies of contracts, license agreements, support agreements, terms, etc. from each vendor.
  • Vender Certifications: Ensure vendors provide necessary compliance certifications and documentation to confirm FERPA compliance. (e.g. SOC 2, ISO 27001, HECVAT). These are especially important if any of the vendors you are working with will be offering cloud services for storage, applications, etc.

Regulatory Compliance

Deadlines and Timelines

  • Submission Deadlines: Clearly state the deadlines for submitting all required information.
  • Review Schedule: Outline the timeline for the compliance review process, including key dates for initial review, follow-up, and final reporting.

Additional Resources