Specifications include, but are not limited to: The Higher Education Community Vendor Assessment Toolkit: ● Helps higher education institutions ensure that vendor services are appropriately assessed for security and privacy needs, including some that are unique to higher education ● Allows a consistent, easily-adopted methodology for campuses wishing to reduce costs through vendor services without increasing risks ● Reduces the burden that service providers face in responding to requests for security assessments from higher education institutions The Higher Education Community Vendor Assessment Toolkit is a suite of tools built around the original HECVAT (known now as HECVAT - Full) to allow institutions to adopt, implement, and maintain a consistent risk/security assessment program. Tools include: ● HECVAT - Triage: Used to initiate risk/security assessment requests - review to determine assessment requirements ● HECVAT - Full: Robust questionnaire used to assess the most critical data sharing engagements ● HECVAT - Lite: A lightweight questionnaire used to expedite the vendor assessment process ● HECVAT - On-Premise: Unique questionnaire used to evaluate on-premise appliances and software
