Skip to main content

SARB Request Questionnaire

Please answer (or obtain the answers from your vendor) the questions below prior to submitting a Software and Accessibility Review Board request.

Contact for assistance if needed.

Checklist for Required Vendor and Requestor Information

Requestor Provides Answers to the Following Questions

Please describe the reason for the software request. How will the software assist in creating a more effective business?

Is there an existing system that this software will be replacing? If so, please describe the current process and the pain points that occur presently that the new software may alleviate.

Please describe the end users of this software. Specifically, will students and/or the general public be an end user?

Is there a time deadline our office should be made aware of and if so, what is it?

What is the cost going to be yearly?

What is the breakdown of the annual cost (e.g. flat yearly fee, monthly fee, per user, etc.)?

Please confirm you have reviewed the University’s Software Application Inventory.

Gather Information from the Vendor to Answer the Following Questions

Does this product require any client software to be installed on Boise State machines?

Are there any client OS compatibility requirements?

What are the supported browsers?

Will there be any browser plugins required?

Will you be needing Boise State’s resources to support this product? Who is the first line of support?

Will a software integration be required with other systems? List all systems.

If there is integration, how is the data being transferred?

Will the software use Boise State authentication?

What SSO technology will be used?

How will users be provisioned/deprovisioned?

How will the user be authenticated?

How are levels of access assigned within the system to users? Please define the levels.

Will a test and/or development environment be provided?

Will customizations affect warranty?

Will Boise State IT resources be required for product configuration, installation, storage, or setup?

How often is the software updated? Will it be automatic or on-demand?

Hosted at Boise State?

What is the name of the cloud hosting provider?

If a server is required, can we use a virtual machine?

If a server is required, will there be any hardware or wires that need to be plugged in?

What type of database does the software use?

Physically where will the data and database backup be stored? Boise State likes to know it will be stored within the continental United States and specifically what state.

If the system allows for automatic Operating System Patching does it require vendor approval for OS?

Does the system availability impact your ability to operate?

Type of data being stored/processed on this system?

Is sensitive (PCI, PII, FERPA or HIPAA) data being stored or transmitted? If so, a Boise State Vendor Security Assessment or the latest full HECVAT is required.

Boise State requires without exception that all sensitive and/or regulated University data must be stored within the continental United States so that US regulations and law apply. This vendor must comply with this requirement and disclose to OIT, the State, and/or Region where the data will be stored as part of the SARB approval process. (Upon submitting the request, there is a 30 day maximum period of time to complete the information and present it to the Cybersecurity team, otherwise the SARB request will not be approved.)

Is the stored data encrypted? All Boise State data should be encrypted if at all possible, but is required for sensitive data.

Will the vendor send emails on the University’s behalf (e.g., as and/or If so, does the vendor support DKIM (Domain Keys Identified Mail)?

Accessibility Questions Required of Vendor

University Policy Requirement

Boise State Policy 8140 requires the University to evaluate software purchased or acquired to assure it meets accessibility standards, to the extent feasible.

Please answer the following questions only if the software will be used by the general public and/or students (not student employees):

Accessibility Questions

Please provide the contact information for a person or team in your company who handles accessibility.

Does the vendor have an accessibility roadmap?

What is the process for responding to accessibility issues?

What is the process for testing/fixing accessibility issues during development?

Does the vendor have a current VPAT available? If so, please provide the most recent version of the VPAT.

How have VPAT claims been verified?

Does the vendor have accessibility reviews they can share?

Is the vendor aware of the Boise State accessibility policy?

Submit Your SARB Request

Submit a SARB Request

After we receive your submission, you will be contacted by a Project Management Office representative to help guide you through the SARB process.

Please allow at least 10 business days to complete your SARB request.

Back To Top