4.2.1 Business, Policy, & Operational Criteria

4.2.1 Business, Policy and Operational Criteria Management Assertions

IdP Operators must have the organizational structures and processes to come into and remain in compliance with the provisions of this IAP.

Management Assertion

Our institution is a legal entity that is an InCommon Participant in good standing, and has the organizational structures and processes to comply with the provisions of this IAP.

Evidence of compliance for audit

Link to University of Nebraska-Lincoln InCommon Participant Operational Practices

Copy of purchase order showing current payment (available upon request)

Copy of InCommon Participant Agreement

Names of University of Nebraska-Lincoln's InCommon Administrative and Executive Contacts:

  • InCommon Executive Contact - Mark Askren
  • InCommon Federation Site Administrators - Brett Bieber, Paul Erickson

Links to University of Nebraska-Lincoln's Information Technology org chart and organizational web pages:

4.2.1.1 InCommon Participant

On September 3rd, 2008, University of Nebraska-Lincoln received a copy of the completed InCommon Participant Agreement, signed by Gary Kraft of University of Nebraska-Lincoln and John Krienke, InCommon CEO. The most recent membership payment of $8050.00 was made on August 11th, 2015, with PO number 1663572. The University of Nebraska-Lincoln is in compliance with other contractual obligations to InCommon, including posting our InCommon Participant Operational Practices.

4.2.1.2 Notification to InCommon

  1. The InCommon Administrative Contact for the University of Nebraska-Lincoln will notify InCommon of any circumstance that may affect the status of University of Nebraska-Lincoln's compliance with this IAP no less than 30 days before the changes are to be made effective, or as soon as practicable after an unanticipated change is noticed.
  2. The InCommon Administrative Contact for University of Nebraska-Lincoln will report to InCommon any breach of security or integrity of its IdMS Operations that may affect the status of its compliance and qualification under this IAP. The report will be made as soon as practicable after any such incident is noted.

4.2.1.3 Continuing Compliance

After initial certification by InCommon, an InCommon Administrative contact or, as backup, the InCommon Executive contact, for University of Nebraska-Lincoln will declare to InCommon continued compliance with profiles under this IAP at least every 3 years.

4.2.1.4 IdPO Risk Management

The operations of the Office of Information & Technology Services at the University of Nebraska-Lincoln are periodically reviewed by the Office of Internal Audit.