For evaluating cloud service providers that handle P4 data on behalf of the University, the Information Security Office offers the Vendor Security Assessment Program (VSAP). The VSAP is intended to ensure that campus third-party service providers adhere to the same baseline level of security practices required for campus systems and applications that contain protected information and are managed and maintained by internal campus resources.
To request a VSAP evaluation for a P4 system that is vendor managed, review the Details of the Vendor Security Assessment Program and then send an email request to security@berkeley.edu (link sends e-mail).
If there are particular services or types of services that you believe would add significant value, please contact David Willson (dwillson@berkeley.edu).
For questions concerning IT policy, contact security-policy@berkeley.edu.
For all other questions, contact security@berkeley.edu.