HECVAT

The Higher Education Community Vendor Assessment Toolkit (HECVAT) is a comprehensive framework designed to help colleges and universities evaluate the data security and privacy practices of third-party vendors. Developed by The Higher Education Information Security Council (HEISC), in conjunction with the Shared Assessments Working Group, EDUCAUSEInternet2, and the Research & Education Networks Information Sharing & Analysis Center (REN-ISAC), HECVAT helps institutions streamline the vendor assessment process and ensure that they are partnering with vendors that adhere to the highest standards of data protection.

By leveraging HECVAT, educational institutions can efficiently identify potential risks, protect sensitive data, and maintain compliance with relevant regulations and industry best practices.

Supporting Documentation

v1.0
Policies
07/03/2024
HLPP-02
v1.0
Policies
15/04/2023
HLDC-04
v1.0
Datacenter
15/04/2023
HLTP-03
v1.0
Policies Security Third Party
14/04/2023
HLPP-02
v1.0
Networking Policies Security
14/04/2023
HLPP-01
v1.0
Company Policies
14/04/2023
HLAP-03
v1.0
Networking Policies Security
14/04/2023
HLPP-01
v1.0
Company Policies
14/04/2023
HLPP-01
v1.0
Networking Policies Security
14/04/2023
HLPP-01
v1.0
Company Policies
14/04/2023
HLPP-01
v1.0
Data Policies Security
14/04/2023
HLPP-01
v1.0
Data Policies
14/04/2023
HLPP-01
v1.0
Data Policies
14/04/2023
HLPP-01
v1.0
Policies Security
14/04/2023
HLPP-01
v1.0
Policies
14/04/2023
HLIH-01
v1.0
Incident Handling
14/04/2023
ITAC-05
v1.0
IT Accessibility
14/04/2023
ITAC-05
v1.0
IT Accessibility
14/04/2023
ITAC-07
v1.0
IT Accessibility
14/04/2023
DOCU-10
v1.0
Company Incident Handling
14/04/2023
DOCU-08
v1.0
Company
14/04/2023
DOCU-08
v1.0
Company
14/04/2023
DOCU-08
v1.0
Company
14/04/2023
DOCU-11
v1.0
Company
14/04/2023
DOCU-09
v1.0
Company
14/04/2023
DOCU-09
v1.0
Company
14/04/2023