Re: Third Party Exchange add-ons

["Bandy, John" <jbandy () SAMFORD EDU>]

  1.  Information Security vets these requests
  2.  The only requests that are granted are the ones that we have a contract with.  Vetting is performed during the 
contract review
  3.  Ongoing data review is not performed at this time.

We do not approve for individual users.  Either everyone gets it or no one gets it.
We have canned language we use to communicate both through email and the block request.

John Bandy
Chief Information Security Officer
Technology Services

205-726-2692<tel:+1205-726-2692> | office
205-726-2692 | fax
JBandy () Samford Edu<mailto:JBandy () Samford Edu>
Twitter<http://twitter.com/SamfordInfoSec>
800 Lakeshore Drive
Birmingham, AL 35229<https://maps.google.com/maps?q=800+Lakeshore+Drive,+Birmingham,+AL+35229,+US>

[mford Samford University Logo]



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Curt Kappenman
Sent: Wednesday, February 10, 2021 8:09 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [EXTERNAL][SECURITY] Third Party Exchange add-ons

The number of requests for Third Party Add-ons (that require admin approval in Azure) has started to increase and this 
has prompted a closer review of the process for approval.

  1.  How does your institution handle these requests?
  2.  Do they go through the same process as any other contract review?
  3.  Who handles the ongoing data review after their approval?

Curt Kappenman
Security Compliance Officer
Anderson University
316 Boulevard, Anderson, SC 29621

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://secure-web.cisco.com/13GE_0Eq0gc5mPwSzCTOt9cZ1iMzTjgL06aMc3CN-SXaA66H_wsHqve4WBU6zAq1RwhX6iK30K4B4cw_S6qIAPfwPmchIHkp6BptKliAxOPqgv1uYZyoMX_Bjc7fWkihh-xR0mNA6DHQ1qvWnsFt55zJx3RRXkz4CMKKImgL-MXURFbz4A3We1AO3o_bKo_3WWLOlTINbuROwWPbbb2rW09kPEWRrichq_MXYGhtAkcEG4mZ3GU1BSDuEql9nhCDt1t87zSECOeArzkVfj5G1quseBNo9HfCxDZQgbM5Qoh_dQQW0vVZ2kOUgnKMzP5mb/https%3A%2F%2Fwww.educause.edu%2Fcommunity>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community