Vendor and Contract Review
When selecting a vendor who will work with Stony Brook University data, the accessibility and the security of the software must be taken into account. The Stony Brook employee making the request must complete the following form, and the vendor must provide a completed HECVAT and VPAT questionnaire(s). Vendors who are not providing a cloud service, and thus do not have an HECVAT available, must still complete the HECVAT Accessibility questions. The answers provided and the feedback given by our vendor review group(s) will help the business unit select a vendor that aligns with SBU’s risk tolerance and accessibility and access to the proposed product(s) and use case.