Software and Online Services - Security and License Review

The North Dakota University System (NDUS) requires that all software be reviewed in accordance with NDUS Policy 840

Before software and online services can be purchased, installed or made available for use by MSU students, faculty and staff, contract and license information must be reviewed for compliance with North Dakota laws, State Board of Higher Education policies and MSU policies. This review must occur even if the platform or software is free. This review also needs to happen if there is hardware that is purchased that sends data to an online service.

IT Central facilitates the Software and Online Services License Review process in collaboration with the MSU Business Office and North Dakota Attorney General's Office campus representative.

If you have questions or need assistance, please contact Minot State Help Desk

Policies and Procedures

The contract and license review process is driven by the North Dakota Attorney General, State Board of Higher Education policy and NDSU policy.

Review Process

A minimum of 2 weeks is needed to review software and online services.

Process of Department Requesting New Software or Online Services

Determine the laws, regulations, policies or contractual obligations that apply to the data that the software or online service will handle. See NDUS Procedure 1203.7
Work with your Software - Contacts to complete the Software and Online Service Contract Review request form.
Respond with additional information and clarification as requested by the chief information security officer, legal, or software licensing staff
Facilitate communication with all parties to complete the purchase order.
Collaborate with the vendor to amend the license or contract as recommend by the Attorney General's office if needed.

Process of the Information Technology Office

Review the license and contract in consideration of State Board of Higher Education Policy 840 and Minot State University Procurement Policy
Assess the level of risk associated with purchasing, installing and using the software or online service, and make a recommendation based on that risk assessment.
If applicable, assess the compliance of the software/service with the Americans With Disabilities Act (ADA)
Facilitate communication among parties, including:
- Consult with Attorney General's office on issues with data privacy, confidentiality, or compliance with law or policy emerge during the review process.
Record and track approved software and online services licenses and contracts, including amended language, for the university.

Submit a Request

Submit a request for software or an online service contract review.