[Eril-l] Information security requirements and vendor audits in eresource licenses

[Electronic Resources in Libraries discussion list]

Charlotte,
I have seen that language before, though I can't remember what resource/vendor. I think I did check with our in-house Library IT department and was assured that the University IT department had all of those documents. I accepted the language, and to my knowledge we have never been audited.

I thought it was strangely specific, too.
All the best,
Christina


Christina Torbert

Head of Continuing Resources and Acquisitions

Liaison to departments of Philosophy, Religion, and Gender Studies

J.D. Williams Library

University of Mississippi

P.O. Box 1848

University, MS 38677

662-915-7059 (o)

Pronouns: she/her



________________________________
From: Eril-l <eril-l-bounces at lists.eril-l.org> on behalf of Electronic Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org>
Sent: Tuesday, April 29, 2025 4:31 PM
To: Electronic Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org>
Subject: [Eril-l] Information security requirements and vendor audits in eresource licenses

[EXTERNAL]


Hi all,



I’m looking for input on whether others have encountered clauses in their license agreements that require:

  *   specific information security measures (and associated documentation) to be in place
  *   audit rights for the vendor, to check compliance with the required information security measures



If so – did you accept these terms? Did you coordinate with your institution’s IT?



Thank you!



Charlotte Peterson

Electronic Resources Librarian

Butler University Libraries

cpeterson1 at butler.edu

317-940-5877



Schedule a meeting<https://butler.libcal.com/appointments/cpeterson1>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20250501/992adb2f/attachment.htm>