DA Net New LTI Request Process

DA/DA(+) play a crucial role in the process for proposing new LTIs. The DA step consists of the following the parts:

1. LTI Intake Form Review. Validate the case for the LTI including:
   • Justification/Need for the LTI
   • The LTI cost and whether there is appropriate funding
   • Whether the LTI has AI capabilities
   • The LTI POC and Business Owner
2. Initiate Review Cycles
   • Accessibility review
   • Security/architecture review
   • Third-party review
3. Complete Third-Party Tool Request Form

For more information on the other steps in the process, refer to the New LTI Request Process guide which overviews each step.

Note: The LTI Intake form should be completed prior to beginning the activities listed on this page. Typically, the form is completed by instructors, but other individuals, such as DAs, may complete the form as well.

LTI Intake Form Review

The following list identifies key pieces of information from the LTI Intake form that DAs must validate or otherwise assess. If any information is missing from the LTI Intake form, return the form to the requestor.

• Validate that there is a need for the new LTI – DAs will need to review the justification provided for the new LTI in the LTI Info section of the LTI Intake form. The justification should explain why the new LTI is beneficial and should provide a case for unique support to the school/unit. Additionally, DAs will need to confirm that none of the currently deployed LTIs meet the need. Refer to the table in the All Third-Party Tools guide for a list of all currently deployed LTIs.
• Confirm that there is funding available for the new LTI – DAs will need to review the total cost of the new LTI provided in the LTI Info section of LTI Intake form and compare that against the school/unit budget to determine if deploying the LTI is feasible.
• Determine to what extent, if any, the LTI has AI capabilities.
• Identify the LTI POC and Business Owner – This information should have been provided on the LTI Intake form in the Vendor Contact Info section.

Initiate Review Cycles

DAs are responsible for kicking off the accessibility, security/architecture, and third-party reviews. To do so, they need to obtain Voluntary Product Accessibility Template (VPAT), Higher Education Community Vendor Assessment Toolkit (HECVAT), and Service Organization Control Type 2 (SOC2) reports from the vendor. In rare instances, these reports can be found on the vendor’s site; however, it is much more common that these reports can only be obtained by contacting the Customer Success Manager (CSM). The CSM’s contact information should be documented in the Vendor Contact Info section of the completed LTI Intake form.

• Accessibility Review. All new LTIs must, at minimum, meet section 508 accessibility requirements and follow Web Content Accessibility Guidelines (WCAG). To assess a new LTI’s compliance, DAs conduct a review of the VPAT themselves. Refer to the appendix for the VPAT Quick Review Score Card.
• Security/Architecture Review. All new LTIs must also be assessed in terms of security vulnerabilities and weaknesses. To initiate this step, complete the Security Questions for New LTIs form. Once that form has been completed and the HECVAT and SOC2 reports have been obtained from the vendor company, complete the Application Add-On SNOW Form and add all three documents as attachments.
• Third-Party Review. Complete the Third-Party Security Risk Management SNOW Form.

Complete Third-Party Tool Request Form

Once all other steps have been completed, DAs will need to complete and submit the Third-Party Tool Request Form.