Question OPAP-06
Do you require remote management of the system?
| Weight | 20 |
| High Risk | No |
| Required | Yes |
| Compliant Answer | No |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
EDUCAUSE provides no guidance here
Answering "YES"
Describe the tools and technical controls implemented to secure remote access.
Reason for Question
Telecommuting in the IT world is common. An institution should know that proper safeguards are in place, if remote access is allowed. Vendor responses vary greatly on this, so confirm the context of the response if it is not clear. Many cloud services can only be managed remotely, so there is often a gray area to interpret for this response.
Follow-Up Inquiries
Ask the vendor to summarize the reasoning behind this business process and request additional documentation that outlines the security controls implemented to safeguard institutional data.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]