Technology Risk Assessment Vendor Input Form

Technology Risk Assessment Vendor Input Form

Part A - Introduction
IMPORTANT: PLEASE READ FIRST!

This form is to be used by the vendor to fill out information about their product. Once the Vendor has completed and submitted the information through this form, a PDF will be sent to them with their details.

They (Vendor) should review and then forward to the Western University project initiator for them to include in their own submission.

For the Vendor, Developer, or Implementation partner - please use this webform to capture information about your product or process so that we can assess for risk within Western University.

Please be as detailed as possible and supply documentation through the various upload functions.

When complete and you click on SUBMIT, an email will be sent to the email address you supplied in the form with the contents of the form submission and any relevant files you have uploaded. Please forward that email to your business or research contact at Western University so that they are able to include in their risk assessment submission.

Thank you!!
Name of Initiative
Is Your Solution...

Other

Vendor Information

Part B - Vendor Details
Name of Vendor or Developer
Description of Vendor or Developer
Vendor or Developer Website (if applicable)
Vendor or Developer Contact Name

First NameLast Name
Vendor or Developer Email
example@example.com
Vendor or Developer Phone Number

Area CodePhone Number
Vendor or Developer Address

Street Address

Street Address Line 2

CityState / Province

Postal / Zip Code

Information Technology and Security

IT and Security Details
Does the solution require user authentication (logging in with username and password)?

Other
Please describe the authentication methodology (include any relevant information such as specific protocols like SAML2. LDAP, etc.) and whether Single Sign On (SSO) is supported
Please provide a diagram of the authentication process as an attachment.

Browse Files

Cancelof
Please provide a diagram of the data transfer process as an attachment.

Browse Files

Cancelof
Please describe any "data at rest" protection mechanisms (encryption, etc.)
Please describe any "data in transit" protection mechanisms (encryption, etc.)
Please describe the ability to audit for access management
Please describe the Disaster Recovery Plan (DRP) and backup recovery process
Is the solution compliant with the Accessibility for Ontarians with Disabilities Act (AODA)?

Other
What are the bandwidth requirements for this solution (estimate)?
Please describe the solution's availability (hours of service, uptime commitments, peak times)
Please describe the issue notification process (how does Western become aware of issues and/or downtime due to application management?)
Please describe the technical support offered from the vendor

Enter the message as it's shown
Should be Empty: