Standard:
YALE-MSS-1.3: Ensure appropriate contracts for all third-party relationships are in place
YALE-MSS-1.3.1: Ensure the Data Addendum process is followed when storing data in a vendor's cloud
Low Risk Endpoint
Not Required
Moderate Risk Endpoint
Not Required
High Risk Endpoint
Not Required
Low Risk Server
Not Required
Moderate Risk Server
Required
High Risk Server
Required
Low Risk Mobile Device
Not Required
Moderate Risk Mobile Device
Not Required
High Risk Mobile Device
Not Required
Low Risk Network Printer
Not Required
Moderate Risk Network Printer
Not Required
High Risk Network Printer
Not Required
Details
The data addendum process is required when Yale Moderate or High Risk data is being stored in a vendor's cloud.
Contact Procurement to determine if a data addendum is already in place or a new one is needed.