Loading...
HomeMy Public PortalAboutADM-414_Software Review Policy_Effective 02-15-2022 City of Lebanon New Hampshire ADMINISTRATIVE POLICIES & PROCEDURES CYBER SECURITY SOFTWARE REVIEW POLICY Policy Number Effective Date Last Revision Page No. ADM-414 2/15/22 Page 1 of 2 Approved by: Section 1.0: Purpose The City uses various software to support its mission to ensure efficiency and maximize productivity. It is important to identify the needs and explore software that would best meet the global needs of the City. This policy is intended to standardize the process for software-related purchases and review the security of the software. Section 2.0: Scope This policy applies to all City departments except the Library, that are researching and intend to purchase software for the City. Section 3.0: Definitions Software are the programs and other operating information used by a computer. Software as a Service (SaaS) is a licensing and delivery model in which software is licensed on a subscription bases and centrally hosted. Other Cloud-based services are specialized hosted applications that support the city services. The term software as it pertains to this policy includes SaaS and other cloud-based services. Section 4.0: Policy Detail When it is determined that a new software or replacement of software is needed, the Software Review Committee (SRC) must approve it prior to purchase. This will allow full review of the software to ensure software meets the specified needs, and there is no current software in use that can meet those needs. The department looking to purchase the software must identify reasons for purchasing new or replacement software. The department designee must complete the Software Review form. The Software Review Committee will meet every other week and review any software that has been submitted. Departments are highly encouraged to consult with the SRC at the beginning of the consideration process and not just prior to the decision to purchase. DocuSign Envelope ID: B2034087-7E7A-4716-AAF3-58BFB782EB09 City of Lebanon New Hampshire ADMINISTRATIVE POLICIES & PROCEDURES CYBER SECURITY SOFTWARE REVIEW POLICY Policy Number Effective Date Last Revision Page No. ADM-414 2/15/22 Page 2 of 2 Approved by: The SRC may periodically review existing software to ensure it is still meeting the City’s needs. Section 5.0: Procedures 1. Submit a request to Cyber Services at the time it is determined either a replacement or new software is needed. 2. Complete the Software Review form within the Help Desk system and attach supporting documentation to the support case. 3. SRC will schedule a meeting to include designated staff who will be impacted by the implementation of new or replacement software. 4. SRC will determine the validity of the software and approve or deny the software. 5. The SRC will review the security apparatus of the proposed software to ensure it meets the requirements of the City. 6. The SRC will strive to ensure that to the extent possible that software that may meet the needs of multiple departments or the entire City is taken into consideration. 7. Decisions of the SRC may be appealed to the City Manager for consideration. Section 6.0: References (Charter/Code/State Statues) Section 7.0: Policy & Procedure Revision History Section Revisions Date Original Adoption 2/15/22 Amendment Amendment Amendment DocuSign Envelope ID: B2034087-7E7A-4716-AAF3-58BFB782EB09