Per the procedures defined in the Information Security for Institutional Information Policy (IT-8), this Information Security Requirement ("ISR") for Institutional Information Held by Third Parties ...