students walk on University of Idaho campus

Visit U of I

Learn about the many reasons the University of Idaho could be a perfect fit for you. Schedule Your Visit

Parents on campus during orientation

Homecoming Oct. 1-7

Join other Vandal families for a week of celebration and Vandal traditions. View Calendar

campus full of students

U of I Retirees Association

UIRA has a membership of nearly 500 from every part of the University. Learn More

ITS Locations

Physical Address:

Teaching Learning Center Room 128

Office Hours:

Monday - Friday
8 a.m. to 5 p.m.

Summer Hours:

Monday - Friday
7:30 a.m. to 4:30p.m.

Phone: 208-885-4357 (HELP)

Email: helpdesk@uidaho.edu

Map

Physical Address:
ITS Administration Offices 
Administration Building 
Room 140 
Moscow, ID

Mailing Address:
875 Perimeter Drive MS 3155 
Moscow, ID 83844-3155

Phone: 208-885-4357

Fax: 208-885-7539

Physical Address:
TLC 132, Moscow

Office hours
M-F 8 a.m. to 7 p.m.

Summer hours
M-F 7:30 a.m. to 4:30 p.m.

Phone: 208-885-0570

Email: avhelp@uidaho.edu

Physical Address:

Memorial Gym 120
Moscow, Idaho

Phone: 208-885-6411

Fax: 208-885-0566

Physical Address:
Pitman Center (SUB)
Room 53
Moscow, ID

Mailing Address:
875 Perimeter Drive MS 4247 
Moscow, ID 83844-4247

Current Hours of Operation 
Mon: 7:30-4:30 p.m.
Tue: 7:30-11:30 a.m.
Wed: 7:30-11:30 a.m.
Thur: 7:30-11:30 a.m.

Phone: 208-885-2580

Email: records@uidaho.edu

Web: Records Management Website

Physical Address:

Pitman Center (SUB)
Room 124 
Moscow, ID

Office Hours:
12:00pm to 4:30pm

Summer phone and email support:
8:00 a.m. to 4:00 p.m.


Mailing Address:
875 Perimeter Drive MS 4256 
Moscow, ID 83844-4256

Phone: 208-885-7522

Fax: 208-885-9208

Email: vcoffice@uidaho.edu

Web: Vandal Card Office Website

Vendor Security Assessments

To assure UI data is handled, and systems are operated, compliant with UI policy and IT standards required by Data Classification and Standards (APM 30.11), the Information Security Office provides assistance with categorization and assessment of systems. The data classification process assists ITS in prioritizing the highest risk vendors to ensure they receive the most careful scrutiny.

A system is a discrete set of resources assembled to store, process, maintain, share, or dispose of data. This includes, but is not limited to, any endpoint devices (desktops, laptops, smart phones, tablets) as well as servers, networks, or third party and cloud services.

When using, purchasing, or renewing systems or vendors, ITS can assist with identifying the risks associated with a particular product or service for the intended use. A Risk Assessment must be completed by the ITS Information Security Office before the University acquires or utilizes external information systems.

Classification then Assessment then Purchase
The process of assessing data classification.
  1. University departments can use the Data Classification Tool to self-assess data classification, or submit a vendor/system to ITS for formal security assessment. This may be done on existing systems, or before purchasing a new system. If the data is already classified, the user may simply submit a request to ISO-Assessments@uidaho.edu to begin the process.
  2. Once data is classified for the system, the vendor must provide a completed questionnaire using the Higher Education Cloud Vendor Assessment Tool (HECVAT, preferred), or if classified as low risk, the HECVAT Lite.
  3. The Information Security Office will provide an assessment of risk with recommendation associated with using or purchasing the system for the data involved. Please allow 20 business days response time in case vendor responses need to be clarified.
  4. The Information Security Office should be consulted whenever there are major changes to the product, architecture, or data in use.

Frequently Asked Questions


Q: This system will be going out for RFP, will a security assessment still be required?

A: Yes, especially when significant investment is being made by the university, we need to ensure the systems purchased will be operated within expected standards


Q: This is a renewal of an existing contract, will an assessment be required?

A: Since this is a new process, the vendor may not have been thoroughly evaluated previously. It is best to work with ITS well ahead of any contract renewals to ensure any risks are understood and evaluated.


Q: Is this just for cloud applications?

A: UI policy only requires this assessment for cloud or third-party vendors, but other applications, particularly those that will handle High Risk data should also be careful evaluated. Contact ITS for more information.


For more information, please contact Mitch Parks, Information Security Officer, at ITS-Security@uidaho.edu.

ITS Locations

Physical Address:

Teaching Learning Center Room 128

Office Hours:

Monday - Friday
8 a.m. to 5 p.m.

Summer Hours:

Monday - Friday
7:30 a.m. to 4:30p.m.

Phone: 208-885-4357 (HELP)

Email: helpdesk@uidaho.edu

Map

Physical Address:
ITS Administration Offices 
Administration Building 
Room 140 
Moscow, ID

Mailing Address:
875 Perimeter Drive MS 3155 
Moscow, ID 83844-3155

Phone: 208-885-4357

Fax: 208-885-7539

Physical Address:
TLC 132, Moscow

Office hours
M-F 8 a.m. to 7 p.m.

Summer hours
M-F 7:30 a.m. to 4:30 p.m.

Phone: 208-885-0570

Email: avhelp@uidaho.edu

Physical Address:

Memorial Gym 120
Moscow, Idaho

Phone: 208-885-6411

Fax: 208-885-0566

Physical Address:
Pitman Center (SUB)
Room 53
Moscow, ID

Mailing Address:
875 Perimeter Drive MS 4247 
Moscow, ID 83844-4247

Current Hours of Operation 
Mon: 7:30-4:30 p.m.
Tue: 7:30-11:30 a.m.
Wed: 7:30-11:30 a.m.
Thur: 7:30-11:30 a.m.

Phone: 208-885-2580

Email: records@uidaho.edu

Web: Records Management Website

Physical Address:

Pitman Center (SUB)
Room 124 
Moscow, ID

Office Hours:
12:00pm to 4:30pm

Summer phone and email support:
8:00 a.m. to 4:00 p.m.


Mailing Address:
875 Perimeter Drive MS 4256 
Moscow, ID 83844-4256

Phone: 208-885-7522

Fax: 208-885-9208

Email: vcoffice@uidaho.edu

Web: Vandal Card Office Website