The Higher Education Cloud Vendor Assessment Tool (HECVAT) was created by the Higher Education Information Security Council (HEISC) Shared Assessments Working Group. Its purpose is to provide a starting point for the assessment of third-party provided cloud services and resources. Over time, the Shared Assessments Working Group hopes to create a framework that will establish a community resource where institutions and cloud services providers will share completed assessments.
Western Michigan University has chosen to participate in this project for the assessment of cloud services requested by WMU faculty and staff as part of the Technology Compliance Review Process.
The technology compliance review requester should:
- Determine if the HECVAT is required upon submitting a Technology Compliance Review request.
- Submit the link to this page Higher Education Cloud Vendor Assessment Tool to their cloud service vendor, requesting either the Full or Lite version be completed.
- After the vendor fills out and sends the appropriate form back, respond back to the Service Hub work order for the Technology Compliance Review with the file attached.