An institution of higher education contracting for cloud computing services that store, process, or transmit data of the institution of higher education shall:
  (1) confirm that vendors contracting with the institution of higher education to provide cloud computing services for the institution of higher education are certified through TX-RAMP prior to entering or renewing a cloud computing services contract on or after January 1, 2022; and
  (2) require a vendor contracting with the institution of higher education to provide cloud computing services for the institution of higher education that are subject to the state risk and authorization management program to maintain program compliance and certification throughout the term of the contract.

Source Note: The provisions of this §202.77 adopted to be effective November 17, 2021, 46 TexReg 7775; amended to be effective November 16, 2023, 48 TexReg 6579