Canvas Now Available Canvas functionality has been restored and access is now available. Users may log in at canvas.colostate.edu. Some areas of the system may still experience limited performance. Log in to Canvas

ICT Compliance and Security Review Process

What is this process?

The ICT Compliance and Security Review Process helps ensure CSU software purchases and renewals align with state, federal, and University compliance requirements, including accessibility, cybersecurity, data governance, AI, and procurement standards. 

The soft launch for this process began March 31, 2026 for Student Affairs, College of Liberal Arts, and College of Engineering at CSU in Fort Collins, as well as the Division of IT. It will become mandatory for all CSU System units in fall 2026.

When do I need to complete it? 

Complete an ICT Review if the purchase or renewal: 

Why is it required? 

The review helps CSU: 

  • Meet state, federal, and University compliance requirements 
  • Improve security, accessibility, and responsible data management 
  • Reduce duplicate technology purchases 
  • Increase visibility into technology across the CSU System 
  • Identify opportunities for cost savings and standardization 

How does the process work?

Infographic titled "Software Purchases and Renewals Security and Compliance Review Process" showing a four-step process map for software purchases. Identify need and review options: Consult your local IT team to determine whether an existing solution meets the need. If not, proceed with an ICT request. Submit an ICT request: Submit an ICT request form if the software purchase exceeds $10,000 or accesses, stores, or processes Level 3 or Level 4 data. ICT review process: ICT reviews requests weekly for accessibility, security, data governance, and AI compliance. After approval, you may submit a purchase requisition. Submit a purchase requisition (after approval): Once ICT approval is granted, you will receive an email with instructions to submit a purchase requisition. The process ends with two possible outcomes: Requisition approved: Procurement processes the requisition. Requisition returned: If a purchase requisition is submitted without the required ICT approvals or compliance documentation, Procurement returns it to the requester. A dashed arrow indicates the requester must complete the ICT request, provide the required documentation, and resubmit before continuing.

 

What’s next? 

Submit an ICT Review Request. Once your ICT request is approved, you may submit a purchase requisition to Procurement. Qualifying renewals also require a new ICT review. 

Get Support

Email [email protected] for help or questions about this process.

Software Catalog

Explore the software inventory for licenses already available.

FAQ

Find answers to common questions about the compliance process.