Good afternoon,

San Jacinto College, as part of its new application/vendor procurement process, is evaluating the security posture of Chimera and would like to ask for your help in procuring documentation that proves the security controls in place for the company.

If you have any Information Security documentation you can share with us, it would be greatly appreciated. If an NDA needs to be signed, we would be happy to provide that to you.

Documents that help:

• HECVAT (one will be attached that can be filled out)
• SJC Vendor Questionnaire (one will be attached that can be filled out)
• Information security policies and procedures
• Datacenters or Hosting Providers used.
• Incident response plan
• Disaster recovery plan
• Business continuity plan
• System and network architecture diagrams
• Penetration testing reports
• Vulnerability scan reports

If you can provide the Data Centers that are used and the Hosting Providers, it will also help our evaluation process.

Thank you in advance for your help. Please reach out if you have any questions.

Regards,

e
		Aaron C. Melendez Third-Party Risk Analyst The Office of Cybersecurity Cell: (281) 635-2940 (Please call x 2 or Text) San Jacinto Community College 4624 Fairmont Pkwy, Pasadena, TX 77504 Technical Support: Get help at SanJac ITS | call (281) 998-6137  www.sanjac.edu | www.facebook.com/sanjacintocollege | @SanJacCollege

“Under pressure, you don’t rise to the occasion, you sink to the level of your training.”