Standard operations question

[Jared Evans <jared.evans () GALLAUDET EDU>]

I have a system ownership question and am curious as to what
policy/guidelines most of you follow with this scenario:

A department has gone with a service provided by an external party and has
a support contract with them.  This support service necessitates a VPN
account along with an user account (along with appropriate access control
placed upon it).  While we have created and filed the documentation for
this account, who is ultimately responsible for this account going
forward?

The system owner of the service who has set the justification for the
existence of the account or the datacenter team which maintains our
accounts?

-- 

Jared Evans
Information Security Officer
Gallaudet Technology Services
Gallaudet University
jared.evans () gallaudet edu