HigherEd Community Vendor Assessment Tool (HECVAT)

Overview

Campus IT environments are rapidly changing and the speed of cloud service adoption is increasing. As campuses deploy or identify cloud services, they must ensure the cloud services are appropriately assessed for managing the risks to the confidentiality, integrity and availability of sensitive institutional information and the PII of constituents. Both cloud providers and cloud consumers are wasting precious time creating, responding, and reviewing such assessments.

The Higher Education Community Vendor Assessment Tool (HECVAT) attempts to generalize higher education information security and data protection questions and issues regarding cloud services for consistency and ease of use. The matrix:

• Helps higher education institutions ensure that cloud services are appropriately assessed for security and privacy needs, including some that are unique to higher education
• Allows a consistent, easily-adopted methodology for campuses wishing to reduce costs through cloud services without increasing risks
• Reduces the burden that cloud service providers face in responding to requests for security assessments from higher education institutions

(Source: https://www.educause.edu)

HECVAT

 For more information about HECVAT, contact a member of your account team.