Unleash the HECVAT!
Retire the spreadsheet and focus on the vendor risk insights that matter most with Isora Lite from SaltyCloud.
Join a growing community
How it works
Start scaling your vendor risk management (VRM) program in no time.
InCommon Signup
Easily signup with the InCommon Federation. Not a member? Request a manual account provision.
Assess Vendors
Send HECVAT questionnaire assessments to vendors with a single, secure link.
Share HECVATs
Access existing HECVAT assessments in the community database and share your own.
Analyze Reports
Identify critical risks, compare vendor scores, and inform your procurement process.
“Before, we were managing compliance with spreadsheets: it was costly, unscalable, and untrustworthy. Isora GRC makes it easier to prove compliance and manage risks across our large, complex campus.”
Chief Information Security Office
Large Southwestern University
About the HECVAT
The Higher Education Cloud Vendor Assessment Tool (HECVAT) was a collaborative effort between EDUCAUSE, Internet2, and REN-ISAC to standardize the vendor risk assessment process for the higher education community.
Recommended
GLBA Compliance in Higher Education: 2023 Complete Guide
Security teams face a myriad of problems when starting and executing a cybersecurity risk…
Understanding the GLBA Safeguards Rule, 2023 Complete Guide
The GLBA Safeguards Rule is a federal law that requires financial institutions to implement specific…
How to Build a Risk-Based Infosec Program in Higher Education, Complete Guide
Learn how to build a risk-based information security program to achieve cyber resilience at higher…
Say hello to powerfully simple GRC
The easier solution for mitigating risk, improving compliance, and building resilience
