Vendor Requirements for Technology Assessments

Required Vendor Forms

The below two forms are required for every technology risk assessment.

As outlined in the Technology Risk Assessment process, the Risk and Compliance (RAC) team will send the vendor direct links to complete these two required forms during the intake phase. Ensure that the vendor completes them within 3 business days.

Digital Accessibility Vendor Requirements

The university is committed to upholding the principles of HB21-1110 Colorado Laws For Persons With Disabilities to ensure that people with disabilities have equal, available and reliable access to technologies. All software and technology used to conduct university business must meet the digital accessibility requirements. 

In compliance with the law, the Risk and Compliance (RAC) team will evaluate the vendor’s security and collect information pertaining to IT accessibility, as outlined above on this page. 

We ask that you review the Vendor Options and Guidelines from Digital Accessibility prior to beginning the risk assessment process for more information. Additional information about digital accessibility requirements can be found on the university Digital Accessibility Standards and Resources website.