New business relationships start here
Web Application Risk Assessment Plan and Procedure for 3rd Party Applications
The Oklahoma State University Office of Information Security (OIS) provides information security services to the university to ensure the confidentiality and integrity of data. Pursuant to these services, the OIS requires all systems to have controls in place to prevent unauthorized access of confidential information. Prior to the purchase of 3rd party web application products the OIS conducts cursory penetration tests of the vendors web application, reviews all security-related vendor documentation, identifies risks related to the web application, and provides written reports on risk and mitigation expectations. The OIS requests a thorough examination and testing of information technology security-related controls by trained staff.
