Privacy and security assessments were part of the process of contracting with the vendor. This was done on behalf of all participating OCUL institutions. Locally we completed the Privacy and Security Impact Assessment form for IST and the Secretariat.