Per University at Buffalo, a software and web-based services review is required to comply with federal and state regulations, SUNY and UB policies and industry best practice.
The goal is to identify potential problems before software is acquired or used to avoid serious consequences.
UB’s team of experts stay current on compliance requirements for accessibility, data security and business impact. The team consists of members from VPCIO staff and the Electronic and Information Technology Accessibility Officer.
- Be sure you request software in a timely manner. A standard review by UB’s software committee takes approximately 30 days from date of submission. This time frame could extend out if the software requested, for example, will be used for course instruction with students or needs to be integrated into other platforms, such as BrightSpace.
- Download and fill out the “Vendor Assessment Review (VAR)” form from the Documents Library located under Internal Resources.
- Be as specific as possible when filling out the VAR form, especially for the “Product or Service Description” field. The committee wants to know both the description of the product and business purpose.
- Data Classification Field:
- Category 1 data is restricted data such as Social Security numbers, VISA numbers, Credit Card numbers, HIPAA, etc.
- Category 2 data is private data such as research data, student records, grades, FERPA, etc.
- Category 3 data is public data such as alumni names, mailing addresses, email addresses, etc.
- Once the VAR is filled out, please upload the document below.
- If further information is required, you will be notified either by the School of Management or UB's software committee.
- You are encouraged to respond to any requests in a timely manner or this could potentially delay the review process.
Direct any questions to mgt-var@buffalo.edu