HECVAT - Higher Education Cloud Vendor Assessment Toolkit
The Higher Education Cloud Vendor Assessment Toolkit (HECVAT) is a self-assessment completed by cloud vendors in the United States. The details of the assessment help higher education institutions validate that cloud services are assessed for security and privacy requirements, and allows a consistent methodology for Higher Education Institutions who want to use cloud services. The HECVAT was created by the Higher Education Information Security Council (HEISC) Shared Assessments Working Group, in collaboration with Internet2, and the Research & Education Networks Information Sharing & Analysis Center (REN-ISAC).
There are different versions of the HECVAT, the most relevant to CourseKata being the Full and Lite versions. Because we just provide an online textbook experience to be used in classrooms, we have completed the Lite version, which is generally used for less critical services. The self-assessment details our alignment with industry standards and the security built into our products and infrastructure.