IT Purchasing Guide

IT Purchasing guide is designed to streamline and simplify the process of purchasing software. This ensures security, eliminates redundancy and creates a low-risk list of software that the campus can purchase. These lists will continue to expand.

To purchase software, please follow the eProcurement process in Orion.

All UT Dallas Information Systems should be updated with the latest compatible software patches. This includes patches for the operating system and third-party applications. High-priority patches may need to be installed outside of routine change control procedures at the request of the ISO in order to address critical security vulnerabilities.

Preapproved Software

Preapproved software identifies those that do not require review from ISO or OIT in order to procure them. It does not however preclude from existing Purchasing policies. Small purchases can be made through OneCard. Please note that preapproved software does not absolve the purchaser of accountability for the use of the software.

Preapproved through punch-out on eProcurement using HIED INC

AppleCare through HIED INC
Endnote through HIED INC
Faronics Deep Freeze through HIED INC
IBM SPSS through HIED INC
Microsoft Project through HIED INC
Microsoft Visio through HIED INC
Parallels through HIED INC
Symantec Ghost Solution Suite through HIED INC
VMware Fusion through HIED INC
VMWare Workstation through HIED INC

Preapproved through eProcurement Process

(Submit non-catalog requisition, selecting BuyerCard – Software Review as vendor and submit through workflow for review and approval to add)

Autodesk AutoCAD
BoardEx Academic Research DataNorth American Region OnlyAccessed through Wharton Research Data Services
Canva
Comsol Modules and Addons
ContentFul
Digital River GmbH/Spec
GitHUB
Google Colab Pro+
GPT-3
GraphPad – Prism
Institutional Shareholders Services Inc
ISS Incentive Lab License + EVA Data
Knitro – Artelys.com/solvers
LinkedIn
Mail Chimp per month
MineCraft
Minitab 21 Stat software
Navicat Prem
NETS Database
Nvivo Transcription
Overleaf
Panic Inc/Nova app
PIT FinancialsCompustat Snapshot Wharton Research Data Services (WRDS)
PowerPoint Addons (macros, animations, and flash may present increased risks and should be reviewed thoroughly)
Refinitiv LLC SDC Platinum Renewal
SAS
SAS 2021 Renewal /per person
SAS Faculty and Students Versions
Siteground.com
Smartsheet
Spam Titan Gateway – Cluster
STATA
StatTransfer
TomLab
Transcript Dataset via WRDS (1 YR Subscriptions), Term: June 01, 2020 through May 31, 2021
Trello
Unclutter
Univ of Wisconsin SAP Annual Renewal
Whatpulse
Whiteboard Miro
Writelatex

Requires OIT and Information Security Office (ISO) Review & Approval

These software require OIT and ISO approval through the procurement process. Typically these software have existing site license from UT Dallas or may have preestablished purchasing process. To start the purchasing process, please submit non-catalog requisition, selecting BuyerCard – Software Review as vendor and submit through workflow for review and approval to add. They will contact OIT and ISO if necessary in the process.

Products

Adobe
Cloud Services (AWS, Google, Microsoft Azure, and others)
Camtasia/Snagit
Jira/Confluence
MS Office
MS Windows

Support Contracts

In order to maintain compliance with UTDBP3096, which requires third-party applications to be updated with latest compatible software patches, support contracts should be maintained so UT Dallas may access available updates.

Cloud Computing

Section 2054.0593 of the Texas Government Code (enacted by SB 475, 87^th Texas Legislature, Regular Session (2021)) requires the Texas Department of Information Resources (DIR) to establish and implement a state risk and authorization management program to provide a standardized approach for security assessment, authorization, and continuous monitoring of cloud computing services that process the data of Texas state agencies. DIR by rule is to prescribe (1) the categories and characteristics of cloud computing services subject to the state risk and authorization management program and (2) the requirements for certification through the program of vendors that provide cloud computing services. DIR shall evaluate vendors to determine whether a vendor qualifies for a certification issued by DIR reflecting compliance with program requirements. Institution must ensure that each contract for cloud computing services that it enters into or renews on or after January 1, 2022 complies with Section 2054.0593.

As a result, Institution must require a contractor to comply with the requirements of such a state risk and authorization management program and maintain program compliance and certification throughout the term of a cloud computing services contract. Institution may not enter into or renew a contract to purchase cloud computing services that are subject to the state risk and authorization management program unless the contractor demonstrates compliance with program requirements.

For more information and assistance with becoming an approved DIR vendor for Cloud Computing, please visit the Texas Risk and Authorization web page or contact tx-ramp@dir.texas.gov.

Relevant Policies

OneCard Guide – Disallowed Purchases

Software Purchases are prohibited via OneCard policy.

OneCard Program FY24

Signature Authority Policy

Software Purchases require additional review because employees are not authorized to sign contracts or “terms of use” even if they are “click through”.

View Signature Authority Policy

View Delegations of Authority for UT Dallas (pdf)