Depending on the type of data the product interacts with, there may be compliance and information security requirements relevant to this procurement. Pennsylvania College of Technology Has modified EDUCAUSE's Higher Education Community Vendor Assessment Toolkit (HECVAT) to assess vendor risk and mitigation efforts.
The Penn College branded HECVAT is attached to this article and can be obtained by following the link.
More information on the Educause HECVAT is available by following this link.