Question CHNG-09
Is institutional involvement (i.e., technically or organizationally) required during product updates?
Weight | 15 |
High Risk | No |
Required | Yes |
Compliant Answer | No |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
EDUCAUSE provides no guidance here
Answering "YES"
Summarize the institution's responsibilities during product updates.
Reason for Question
The response to this question allows the institution to understand the information technology resources required to properly maintain the vendor's system. Initial acquisition and setup is important to assess, but the long-term maintenance (and the risks that come with it) should be clearly defined. Use the response to this question to pivot to other questions and/or verify other vendor responses.
Follow-Up Inquiries
Vague responses to this question should be investigated further. Ask for additional documentation for customer responsibilities (in the context of information technology/security).
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]