Application Service Provider (ASP) Request and Review Procedures
The University of North Carolina at Greensboro
Policy Reference: Security of Networks and Networked Data
Approved: November 30, 2006
Document Maintainer: Information Technology Manager, ITS - Data and Voice Operations
Purpose
This procedure addresses the following sections of the related policy:
Section III.G.i
"Requirements of the Sponsoring Department
- If the application is hosted on the campus, it is subject to the Enterprise Systems Policy.
- Individuals, academic colleges/departments, or administrative units must contact ITS and lodge an Application Service Provider (ASP) request.
- If the application under consideration is to be hosted outside the campus and the data."
Risks mitigated through the application of this procedure include potentially damaging network traffic; poor network device performance; and reducing loss, mishandling, and compromise of sensitive data.
Scope
This procedure covers all applications which run across the UNCG network. All faculty, staff and students are implicitly covered. An application service provider is defined to be any entity, local to UNCG or not, which hosts application software to be used across the UNCG network, as part of University Business.
Responsible Parties
- Faculty and Staff
- Vendors
Procedure
The required procedure to host an application on the UNCG network is a three-phase process that includes request, implementation, and review. The Application Administrator for the application will be the contact for each phase of the procedure.
Request
Requests for an application to run across the UNCG network should be submitted to the Technology Service Center via 6-TECH 336-256-8324 or email at 6-TECH@uncg.edu. ITS will review all requests for application hosting. Approval with any conditions and associated costs will be presented to the requestor within 60 days.
Implementation
Once approved, the ASP is required to complete or update the ITS Server Profile for each server involved in hosting the application. Timing for implementation is subject to available ITS staff resources.
A signed Memo of Understanding (MOU) is required between ITS and the Application Administrator outlining service and support expectations, prior to placing any application into production. The server and application are subject to the ITS ASP standards.
Review
- Each application is subject to review outlined by the ITS ASP standards.
- MOUs expire annually and must be renewed by the requestor.