To maintain the confidentiality, availability and integrity of data stored on or transmitted between Georgia Southern systems and 3rd Party Vendors, Information Security has implemented a campus-wide 3rd Party Review process. All 3rd party purchase request must go through the review process to be approved for purchase. The 3rd Party Review is one part of an overall campus IT security plan.
Function of a 3rd Party Risk Assessment
Georgia Southern does not allow the sharing of data / information to external entities except in cases where Information Security and the Data Owner has explicitly approved access to specific data resources. The review process determines the capability of the vendor to secure and protect university data. The intent is to ensure that the Mission of the University is accomplished and all campus data is protected in accordance with Federal, State and US laws, rules, and regulations.
3rd Party Review Service Management
All purchases that interact, process or store data owned by the university will be reviewed for compliance with Georgia Southern and USG requirements. All submissions will be reviewed in the order they are received
- Once all required reviews and approvals are met, the Information Security 3rd Party review will be considered complete and approved
- Changes to the functionality, modules, information collected, stored, etc. will require a new review for the updated features, implementation.
- Only those 3rd Party products or services approved by all required approvers will be considered in compliance with USG and Georgia Southern requirements.
3rd Party Review Process
- Submit a request for purchase by completing the Business case form here at this location: 3rd party Risk review .
- Once the form is complete the submitter will receive an email confirming the submission with a link to a status page for the request
- The status page is for the submitter to track the state of the request
- Once the request is approved, the submitter and Purchasing will be notified to proceed with processing the purchase request
- If the request is denied the submitter will receive notification of the denial.
Have questions about software downloads or need technology support? Our MyTech Support representatives can help.