OIT Project ICT Security Review (Form B) | Office of Information Technology

Please complete the following to indicate types of CU Boulder data that is to be collected, shared, accessed/transmitted, or stored on premise or by an outside entity, supplier, third party or subcontracting agent of supplier.

OIT Project Compliance Review ServiceNow Request Ticket number

This number will be provided in the email confirmation once the OIT Project Compliance Review Request (Form A) has been received.

Contact Information

Name

Job Title

Company/Department

Phone Number

Product/Service Name

Will University data be stored only in the United States?

Yes

Will University data be encrypted while in transit?

(Please note, the University no longer supports SSL)

Yes

Will University data be encrypted while in storage?

Yes

How will University data be stored and protected?

(Please be specific, and use examples if needed.)

How will University data be deleted or scrubbed?

(Please be specific, and use examples if needed.)

How long will University data be stored?

What encryption methods will be used to protect University data? Please be specific.

Are you the CU Requestor of this product/service?

Yes