Software as a Service (SaaS)
What is a SaaS?
Software as a Service (SaaS) is a piece of software that generally:
- Is cloud-based and hosted by a vendor
- Does not require the University to install and host the service on premises
- The vendor is completely responsible for the maintenance and management of the software
- The vendor provides access to the software/application to multiple organisations, (not just Loughborough University). Each organisation will only have access to its own data.
- The system does not require any additional hardware to be installed.
To approve the use of or purchase a new Software as a Service (SaaS) for your students or staff, you must raise a SaaS request. SaaS requests are taken through the Software Risk Assessment process (SRA).
What is the Software Risk Assessment process (SRA)?
The Software Risk Assessment (SRA) process, managed by Business Partnering, assesses and approves the use of SaaS systems. The SRA is a process carried out by IT Services to ensure that all software meets the Cyber Essentials security requirements and upholds the University’s IT and data standards.
In order to purchase and use a SaaS, you must go through the SRA. The below checklist will provide guidance and help support you through the assessment.
Please be aware that each SaaS option involves costs, and your requirements must be evaluated before moving forward with a SaaS solution.
Please note this process is not aimed at students, individuals or up to 5 people who are needing software for individual use. In this instance, we advise you to complete a DPIA by visiting: The DPIA process - step by step | Data protection, information security and data privacy | Loughborough University. If you have identified any risk in your DPIA, you should then consider going through an SRA.