This process must be followed for all software that you wish to access on a VIU device, including FREE software.
Step 1: Submit your request to Privacy Office.
If your department is contemplating a new software or is making a significant change to an existing program that involves personal information, a Privacy Impact Assessment (PIA) should be completed.
The first step is to complete and submit a PIA Needs Analysis Questionnaire. The Privacy Officer will determine whether a PIA is required.
If a PIA is determined to be necessary, please allow 4-8 weeks for this to be completed.
Changes made by the provincial government regarding Privacy Impact Assessments (PIA), and guidelines for IT Security now require Universities to review all software for security, privacy, terms & conditions, and compliance. Any questions you have regarding Privacy can be directed to Privacy.Officer@viu.ca.
Step 2: Submit your request to IT
All software accessed on a VIU device must be assessed by IT. IT is responsible for ensuring that all software accessed on a VIU device:
- Is compliant with legal software licensing provisions. Non-compliance poses significant risks and liabilities for the University. Thus, it is crucial that we hold and keep records of appropriate licenses for ALL software utilized and strictly adhere to the conditions stipulated in these licenses. Ensuring compliance safeguards the University from the potential legal consequences and substantial penalties that could arise from any violations.
- Is compliant with security standards. Security standards ensure that proper measures are taken to protect VIU's data from unauthorized access, theft or modification as well as making certain that interactions between existing and new software is secure and does not compromise the integrity of VIU's data. They also reduce the likelihood of introducing vulnerabilities that could be exploited by attackers and keep VIU protected against emerging threats.
- Is compatible with other VIU technology standards and configurations. VIU is a complex technology environment. We have to comply with a large number of vendor and industry standards as well as ensure compatibility with our infrastructure and devices.
Also, per the VIU procurement agreement, we are obligated to give our software procurement vendor the opportunity to provide us the software if they can meet our requirements. IT will query the vendor and determine if they can source the item and provide you with a quote.
Ensure to include the required information (see below). Once the IT Software team receives your information, they will let you know when you need to start the next step in the process (step 2).
You can submit a ticket from our support portal or e-mail ithelp@viu.ca.
Step 3: Submit your request to Contract Services
All contracts and agreements must be reviewed and approved by the Contract Services department prior to purchase. This includes the Terms of Service (end user license agreements) required to use the software.
NOTE: If a term in the contract says that VIU will “indemnify” or "hold harmless" the other party, or VIU accepts all legal liability in the event of an act or omission by VIU, this is an indemnity. Under agreement with the Province of British Columbia, VIU must send all contracts containing an indemnity given by VIU to the University, College & Institute Protection Program (UCIPP) for review.
For Contract Services and related enquiries, contact Contract Services.
Step 4: Purchase your software through Procurement
Any software that has a cost must be procured through the regular Procurement purchasing process and a purchase requisition must be entered in the Unit4 Finance system.
See the Purchasing Guidelines section below.