Do They Measure Up? Assessing the Security Posture of Third-Party Service Providers

In these days of outsourcing, SaaS, and clouds, higher education is increasingly turning to third parties to host institution-owned data to gain efficiencies and reduce cost. But how do we assess the incremental risk of engaging third parties to host our data? How can we ensure that adequate security practices are in place prior to finalizing any contractual agreement? This session will introduce a general strategy and several tools already in use for prequalifying and auditing third parties and provide a roadmap of how one institution dealt with these issues.