SCM Intake Form (draft)

General Information

7-digit NUFinancials identifier

Suppliers must be registered to create a transactional record

For a one-time purchase, the date entered is at the discretion of the user/unit.

Or spend per year for multi-year contract

Any significant deadlines or timing constraints?*
Is the vendor a single source (or one of few)?*

Select at least one

Select
Caret IconCaret symbol

If utilizing DocuSign to facilitate signatures, please provide the vendor's 1) contact name and 2) email address

If applicable, vendor provided agreement ID number

Will the vendor have access to:

Northwestern's IT systems*

Will the vendor have access to systems that store, process, or transmit NU’s data?

Has a SPSA been conducted?*

Service Provider Security Assessment (SPSA)

Vendor SPSA Requirement Determination


Required when a vendor:

1) receives or creates data, at any level

2) has access to or integrates with NU systems or IT environment


* Once a SPSA is completed upload the determination memo as an attachment to the record

NU’s sensitive or confidential information*

i.e., Level 2, 3, or 4 Data under Northwestern’s Data Classification Policy

Has the SPSA been conducted?*

Service Provider Security Assessment (SPSA)

Vendor SPSA Requirement Determination


Required when a vendor:

1) receives or creates data, at any level

2) has access to or integrates with NU systems or IT environment


* Once a SPSA is completed upload the determination memo as an attachment to the record

If yes, describe the vendor's workflow

Proprietary materials or human biological samples*

Will the vendor be:

Developing or creating Intellectual Property?*

Will the vendor be developing or creating custom work product, materials, goods, software or other custom deliverables that should be owned entirely by Northwestern?

Providing IT services or software?
Is the vendor hosting software remotely?*

Is the vendor hosting the software remotely on their servers / systems (e.g., Software-as-a-Service or “cloud-based” product)

OR is software installed locally on our systems?*
Providing Professional Services?*

Such as outside consultants or service providers that will provide general services to NU (beyond just installation or training).

Does it involve an event or on-site services?*

(1) event-related vendors, such as event spaces and caterers; (2) vendors that need to come on campus to provide some of the services to us.

Providing Research Services*

Such as outside consultants or service providers that will provide services to NU connected to a NU research study or project, such as laboratory testing or analysis services, data analysis, or other research-related services.

Does it require CLIA-certified lab testing?*
Does it require these compliant testing services?*

(21 CFR Part 11, 50, 54 and 56), CLIA, good laboratory practices (21 CFR 58), and Good Manufacturing Practices (21 CFR 210)

Does it include an event or on-site services?*

(1) event-related vendors, such as event spaces and caterers; (2) vendors that need to come on campus to provide some of the services to us.

FINAL STEPS

Once completed you must email the form to yourself or your Contract Administrator so that a PDF copy can be uploaded as an attachment to the contract record

This email address will receive a message from Smartsheet Automation that includes the PDF linked at the bottom