Building Security into the RFP Process

By including a security review as part of the RFP process, Indiana University has been able to identify and mitigate potential risks in products before they are purchased and implemented. IU requires vendors meeting certain criteria to complete a security questionnaire as well as a review process. Frequently, as a result of this process, vendors have agreed to make changes or enhancements that improve the security posture of their product.