UAB has introduced a new Information Technology Acquisition Policy aimed at enhancing security, cost efficiency and customer success through improved technical support and reduced duplication of software systems and services.

The policy, set to take effect July 1, 2025, will apply to all UAB organizations, employees, trainees, and students using UAB information technology. UAB Medical Center units supported by HSIS are not included.

“Our goal is to support the technology tools you need to succeed, but also to ensure security and cost efficiency,” said Curtis A. Carver Jr., Ph.D., vice president and chief information officer. “This policy helps standardize our technology acquisition process and establishes clear approval authority.”

UAB IT will hold town halls to discuss the policy; The first will be held virtually at 2 p.m. on Wednesday, March 19. 

The policy is designed to establish institutional processes and outline approval authority for acquiring university-designated technology, artificial intelligence (AI)-related systems, and consulting services for technology. It aims to ensure that risks associated with the use of information technology are appropriately addressed, thereby advancing UAB’s mission of excellence in education, research, and service.

The policy does not seek to standardize research software that is discipline specific, but research requests also need to be reviewed as part of this policy, as required by cyber security insurance and state law.

Key provisions of the policy include:

• Acquisition approval: All acquisitions of IT hardware, software, or services for UAB business purposes require approval through the UAB procurement process. This includes a review by UAB Purchasing and UAB Information Technology. Exemptions include low-cost, single-user items such as mice, keyboards, and USB thumb drives.
• Hardware and software purchases: Departments or users must request standard hardware and software through the IT Service Catalog. Non-standard requests require a review to ensure proper standards, security, interoperability, and support options.
• AI-related systems: AI-related systems and software have additional governance processes and must align with UAB’s AI principles.
• Capital technology and consulting services: Capital technology purchases and consulting services exceeding thresholds defined in Board Rule 406 require approval from the Board of Trustees of The University of Alabama.
• Lifecycle management: Technology purchases and renewals must include budgeting for lifecycle refresh cycles, with recommended refresh periods varying by equipment type.