Documentation
HECVAT Full v3.0.6
Change Management
CHNG-09

Question CHNG-09

Is institutional involvement (i.e., technically or organizationally) required during product updates?

Weight15
High RiskNo
RequiredYes
Compliant AnswerNo

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

EDUCAUSE provides no guidance here

Answering "YES"

Summarize the institution's responsibilities during product updates.

Reason for Question

The response to this question allows the institution to understand the information technology resources required to properly maintain the vendor's system. Initial acquisition and setup is important to assess, but the long-term maintenance (and the risks that come with it) should be clearly defined. Use the response to this question to pivot to other questions and/or verify other vendor responses.

Follow-Up Inquiries

Vague responses to this question should be investigated further. Ask for additional documentation for customer responsibilities (in the context of information technology/security).

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]