Risk Assessments of Non-Standard Device Requests

The University of Miami Information Security has set default standards for workstation laptops and computers, both PC and Apple options, for employee and student use. Quotes are available for standard technology on the Workday purchasing website*. Nonstandard devices (NSD) are devices not aligned with the default standards.

*Note: to connect, log in to Workday, select Purchases, select Connect to Supplier Website, select OK at the bottom of the page, and then select Connect to access the UM Marketplace.

Every request for a Non-Standard device has to be reviewed and approved by the UMIT Security Risk assessment team.

For the list of supported platforms and a detailed workflow of the approval process, please see our standard operating procedure (SOP) for approving non-supported devices. (Note: this SOP can only be accessed by University of Miami Information Technology (UMIT) employees.)

The steps of the NSD approval process are as follows:

  • User requests for procuring a device in Workday.
  • UMIT Procurement team receives the request.
  • If the requested device is not a standard device, i.e., a Non-Standard Device (NSD), the procurement team sends the NSD Questionnaire to the requestor.
  • Upon receipt of filled in NSD Questionnaire, the procurement team opens a ServiceNow Request for UMIT Security Compliance Team.
  • UMIT Security Compliance team member reviews the request and provides assessment comments on the ServiceNow Request.
  • If the request is approved, the Procurement team proceeds with the purchase of the device. If the request is denied the Procurement team communicates the decision to the requestor.