HECVAT Compliance Consulting

Solutions for HECVAT compliance.

HECVAT Higher Education Community Vendor Assessment Toolkit
This is a cloud security assessment toolkit for cloud service providers to give higher education clients a way to assess the CSPs security posture using the HECVAT security controls matrix to show compliance.
When a client is assessed using the toolkit, they can then be placed in a registry for other Campus IT managers to review, and thus save time for the campus, and the cloud service provider, to prove compliance.

Compliance consulting services for HECVAT Assessments:

  • Assistance to conduct initial or follow up assessment
  • Gap analysis
  • Remediation planning to meet HECVAT compliance to controls matrix
  • Assistance with HECVAT registration
  • Consulting for updating and/or creating internal security / policy and procedures
  • Conducting third party Pen Testing (penetration testing) and vulnerability scans with reporting
  • Consulting for continuous monitoring programs
  • Conducting third party internal audits
  • SDLC review and consulting for compliance
  • Software Quality Assurance review and consulting for compliance

Contact us today. We would be happy to discuss your software compliance needs for HECVAT assessments to provide cloud services to higher education institutions.