The Information Technology Review process is intended to assist all University employees in the acquisition and implementation of information systems, services, and technologies, such as websites, cloud applications, software, or hardware, while helping to ensure compliance with state and federal regulations as well as Board of Trustees IT Policies and system APLs.
The review process is administered by the Information Security team, and covers review of your request by a GRC Analyst, who will review your request as reported against University and Legal requirements. The Information Security team no long produces Digital Accessibility Reviews for Accessibility Compliance. Users will need to request these reviews independently from their Campus Disability Offices or the Equal Opportunity Office.
The Information Technology Review Request Form should be completed by the sponsor or their designee. Users should review the IT Project Intake Website and confirm that the request does not meet IT Project reporting criteria nor RFP or Competitive Bid Threshold. If your request meets the requirements stated by either process, please make sure to use the intake form on the right of the IT Project Intake Website.
When Needed
Completion of the form is needed once the specific product/solution is known, and the sponsor of the technology want information on the solution's compliance with state and federal regulations as well as Board of Trustees IT Policies and system APLs.
Solutions that require integrations with existing systems, implementation assistance by IT, meet APL competative bid thresholds (defined by APL VII-A), or are exploring potential solutions for pruchase, should report their request IT Project Intake Website using the option on the right - titled "Start the Intake Solution Process."
This process could include the initiation of or referral to the appropriate "sub" review tasks listed below.
Detailed Information
Potential Information Technology Review Tasks (as a table)
| Review Type |
Objective |
Performed By And/Or With |
| Initial Research & Analysis |
Performs Initial Research and Analysis For 5 Areas in case further review by area leadership or SMEs is needed - Portfolio, Implementation/Operations/Support, Hardware, and Projects |
Technology Review Request Coordinator, Director of Campus Technology. |
| Information Security Review |
Based on the type and amount of data, it determines if further vetting of the third party is needed, and determines if there is a need for a safeguarding agreement (sometimes referred to as a Rider C). |
IT Information Security Team |
| Technology Review Summary |
Summarizes all of the reviews performed, including recommendations and next steps. This summary is sent to the person who completed the review request, plus the appropriate Director of Campus Technology, and should be attached to the requisition in MarketPlace. |
Technology Review Request Coordinator |
During the review process, your Director of Campus Technology will be kept informed about the various reviews and can be a resource if you have questions or concerns that do not seem to be getting addressed. Directors are listed below.
UMA - Tanner Kelleter (Director of Campus Technology)
UMF - Matt Jacobson (Director of Campus Technology)
UMFK - Robert Nalesnik (Interim Director of Campus Technology)
UMPI - John Furst (Director of Campus Technology)
UMaine/UMM - Tom Drake (Director of Campus Technology)
USM - Kim Tran (Campus IT Officer)
UMS - Kim Tran (Campus IT Officer)
300 Fore Street - Matt Jacobson (Interim Director of Campus Technology)
START A REQUEST