Architectural Standards Review Board Requests

The Architectural Standards Review Board (ASRB) is responsible for reviewing, verifying compliance, providing recommendations for new software and upgraded software, and hardware procurement projects and upgrades. The purpose of the ASRB process is to communicate business needs to ITS and other stakeholders. The university and ITS may already have supported software or hardware available that may be used. Additionally, the university and ITS may have existing contacts with various vendors that can expedite the procurement process.

Key Features

• Ensure compliance with applicable policies, regulations, and laws
• Realize potential cost savings
• Facilitate and expedite the procurement process with existing vendors

Getting This Service

Prior to purchasing software or hardware that will impact data management, storage, dissemination, security, involve controlled unclassified or sensitive data, or impact user experience, and in order to comply with Mason's procurement policy, the ASRB process should be initiated via a TeamDynamix request. Once your request has been processed, you will receive a confirmation email with an assigned ticket number. The ticket number is used to identify your request across all review groups and organizations.

Please note that significant architectural changes to software, such as moving the software to a cloud-based solution may require ASRB review.

Availability

Requests are processed during normal business hours, Monday through Friday, 8 a.m. to 5 p.m.

ASRB Ready Software List

All instances of potential use of these listed software and services involving Protected Data, i.e., Highly Sensitive Data or Restricted Data as defined in the University Policy Number 1114: Data Stewardship, MUST be submitted to ASRB for review.

Approved Software Listing

Policy

The following policies may be applicable when purchasing or changing administrative or academic software.

University Policies

• University Policy Number 1307: Procurement and/or Development of Systems/Applications
• University Policy Number 1201: Non-Discrimination Policy
• University Policy Number 1203: Non-Discrimination and Reasonable Accommodation on the Basis of Disability
• University Policy Number 1308: University Information Technology Accessibility

Commonwealth of Virginia Law and Regulation

• Information Technology Access Act § 2.2-3500 through § 2.2-3504 of the Code of Virginia

NIST 800-171 Rev. 1 Compliance

• Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

NIST 800-53 Rev. 4 Compliance

• Security and Privacy Controls for Federal Information Systems and Organizations

Federal Disability Laws and Regulations

• 21^st Century Communications and Video Accessibility Act (CVAA)
• Americans with Disabilities Act of 1990 (ADA)
• Section 504 of the Rehabilitation Act of 1973
• Section 508 of the Rehabilitation Act of 1973

Additional Information

Several organizations may be a part of the ASRB review process and have specific areas of the request to review. Requirements specific to each organization may be found in the following:

• Solution Integration and Architecture (SIA)
• Project Management Office (PMO)
• Enterprise Applications (EA)
• Enterprise Infrastructure Services (EIS)
• Information Technology Security Office (ITSO)
• Assistive Technology Initiative (ATI)
• The owners of any data requested, if applicable (e.g., HR, Registrar, Finance, etc.)
• University Records Management
• Other Departments