[Eril-l] Information security requirements and vendor audits in eresource licenses

[Electronic Resources in Libraries discussion list]

Hi,
I haven't seen this in any of our licenses, but our IT department must
review and approve all of our license agreements before they can be signed
(and we don't have signature authority). IT has brought other issues to our
attention like authentication and authorized users and would presumably
flag clauses like the ones you've seen.

Patrick

*Patrick Hartsfield | Assistant Director for Collections and Metadata*

Springfield College
Office of Library Services

263 Alden Street
Springfield, Massachusetts 01109

springfield.edu | 413-748-3784
jhartsfield at springfield.edu


On Wed, Apr 30, 2025 at 4:21 PM <eril-l-request at lists.eril-l.org> wrote:

> Message: 3
> Date: Tue, 29 Apr 2025 21:31:58 +0000
> From: Electronic Resources in Libraries discussion list
>         <eril-l at lists.eril-l.org>
> To: Electronic Resources in Libraries discussion list via Eril-l
>         <eril-l at lists.eril-l.org>
> Subject: [Eril-l] Information security requirements and vendor audits
>         in eresource licenses
> Message-ID:
>         <mailman.994.1745962325.1175082.eril-l-eril-l.org at lists.eril-l.org
> >
> Content-Type: text/plain; charset="us-ascii"
>
> Hi all,
>
> I'm looking for input on whether others have encountered clauses in their
> license agreements that require:
>
>   *   specific information security measures (and associated
> documentation) to be in place
>   *   audit rights for the vendor, to check compliance with the required
> information security measures
>
> If so - did you accept these terms? Did you coordinate with your
> institution's IT?
>
> Thank you!
>
> Charlotte Peterson
> Electronic Resources Librarian
> Butler University Libraries
> cpeterson1 at butler.edu
> 317-940-5877
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20250501/897e58b6/attachment.htm>