HECVAT 3.0 Now Available in Standards Library

April 21, 2022

The HECVAT, or Higher Education Community Vendor Assessment Tool, is a questionnaire framework designed to help institutions of higher education measure their vendor risk. HECVAT was developed by EDUCAUSE's Higher Education Information Security Council (HEISC), a team dedicated to security, data governance, and compliance in higher education.

HECVAT recently upgraded to version 3.0 which includes the following changes:

  • General Question Revisions
  • Expansion to include Accessibility
  • Updates to Identity and Access Management
  • Reorganization for Ease of Use
  • New Crosswalks

For more information on HECVAT 3.0, click here.

standards vendor assessment hecvat third party risk mgmt vendor security management

About the author


The latest insights and updates on information security and third party risk management.

Hate security reviews?
Want FREE AirPods?*

Offer valid for any decision-maker/influencer in relation to your company’s third-party risk management strategy. Company size must exceed 100 employees. Exclusions apply. Limit 1 pair per company.