The HECVAT, or Higher Education Community Vendor Assessment Tool, is a questionnaire framework designed to help institutions of higher education measure their vendor risk. HECVAT was developed by EDUCAUSE's Higher Education Information Security Council (HEISC), a team dedicated to security, data governance, and compliance in higher education.
HECVAT recently upgraded to version 3.0 which includes the following changes:
- General Question Revisions
- Expansion to include Accessibility
- Updates to Identity and Access Management
- Reorganization for Ease of Use
- New Crosswalks
For more information on HECVAT 3.0, click here.