Purpose
To provide É«ÖÐÉ« with guidance to develop and implement the appropriate activities with regards to the acquisition, and eventual disposition or information technology assets, É«ÖÐÉ« system components, and third-party services.
Policy
É«ÖÐÉ« exercises due diligence and due care when engaging in the acquisition of information technology assets, including but not limited to, É«ÖÐÉ« system components, hardware, software, and third-party services. É«ÖÐÉ« recognizes that information technology assets have a limited useful lifespan and will designate appropriate End-of-Life (EoL) for information technology assets.
Summary
É«ÖÐÉ« requires that systems acquired for use in the É«ÖÐÉ« meet all Federal and State laws in addition to meeting security requirements. The acquisition begins with acceptable configuration provided by É«ÖÐÉ« to meet acceptable security standards as well as being appropriate for delivering the designated service, documentation that is distributed appropriately and a responsible end of life, disposed of in accordance with É«ÖÐÉ« policy and replaced.