The acquisition and development portfolio includes privacy and security policies related to contracting, purchase or development of software and hardware.
Acquisition and Development addresses the selection, acquiring or development of any IT asset, including hardware, software, data, and IT services. The cybersecurity-related policies in this portfolio are mapped to the NIST SP 800-53 control families.
Accounting Services - Credit Card Merchant Services and PCI Compliance (device acquisition, merchant accounts, third-party vendors) (on bussvc.wisc.edu)
DoIT - Standards for Managing Test and Service Accounts (please contact itpolicy@cio.wisc.edu)
Purchasing Services - Purchasing Policies & Procedures (on bussvc.wisc.edu)
UW System (on wisconsin.edu)
IT Policy-related
IT Governance (on it.wisc.edu)