Working with Vendors

Contract language

V2: Contracts with vendors managing Level 3 or Level 4 information must contain specific confidentiality language approved by the Office of General Counsel (OGC), or be reviewed by the OGC. Find out more about appropriate Contract Riders for Vendors.

Level 4 vendors

V3: The security design, policies, and procedures of vendors and parties who will collect, process, host or store Level 4 information must be reviewed by a University Information Security Officer. Find out more about appropriate Contract Riders for Vendors.