MOHAWK RIC
315-361-2700 www.moric.org
VENDOR MANAGEMENT PLAN
4937 Spring Road Verona, NY 13478
MORIC PLANS TO MATURE AND SCALE THE REGIONAL VENDOR MANAGEMENT PROGRAM The MORIC maintains a Vendor Management Program (VMP) to reduce vendor risk, optimize products’ performance, drive technology innovation, and support effective stewardship of K-12 funds. This program is targeted at addressing needs related to the MORIC’s services. In NYS, school districts access many products by participating in services offered by BOCES and RICs. The MORIC offers a variety of technology and data services, that involve vendor relationships, to support the needs of 4 BOCES and 49 school districts. Additionally, districts from outside of the region can participate in the Mohawk RIC’s services through a cross-contract process. As school districts have common needs across the state, many of the same products are supported by the 12 RICs and 37 BOCES. As a result, the MORIC’s VMP leverages centralized structures to address certain scopes of work. These structures support improved outcomes and decrease costs. Currently, new centralized RIC One structures are being developed and tested. These new RIC One Risk Operation Center (ROC) structures are changing the primary entities responsible for each function. As a result, the diagram below illustrates the core elements of MORIC’s future Vendor Management Program. While primary entities are identified, MORIC will also use local procedures and staff to address unique local needs for all functions.
MORIC’S VENDOR MANAGEMENT PROGRAM PENDING A SUCCESSFUL RIC ONE ROC PILOT FUNCTIONS
MORIC FUNCTION
STRATEGIC SOURCING
BOCES/RICs CONTRACTS CONSORTIUM FUNCTION SOLICITATION AND SELECTION PROCESSES
$ $
PURCHASE AND PAYMENT PROCESSES
RIC ONE ROC FUNCTION DUE DILIGENCE DATA PROTECTION PROCESSES
Strategic Sourcing and Procurement involves leveraging policies and processes to obtain technology and IT services in compliance with state laws and best practice.
CONTRACTS MANAGEMENT
MASTER SERVICE AGREEMENTS (MSAs)
DATA PRIVACY AGREEMENTS (DPAs)
Contract Management involves negotiating terms that address legal and regulatory requirements. Additionally, other terms are negotiated to mitigate risk.
SERVICE AGENCY STRUCTURES
LEA ONBOARD AND OFF-BOARD PROCESSES
ONGOING LEA SUPPORT AND TRAINING STRUCTURES
As school districts access products by participating in RIC services, unique vendor management structures are needed. Service Agency Structures are used to support the development and maintenance of these multi-party relationships.
RISK MANAGEMENT
DATA PROTECTION RISK MANAGEMENT
PERFORMANCE RISK MANAGEMENT
VALUE RISK MANAGEMENT
Risk Management involves implementing processes to minimize risks associated with products and vendors. Processes are used to influence vendors’ cybersecurity postures, the quality of products, and vendors’ plans for existing and new solutions. -3-