1 year ago

The HECVAT (https://www.upguard.com/blog/hecvat) was developed by the Higher Education Information Security Council (https://www.educause.edu/focus-areas-and-initiatives/policy-and-security/cybersecurity-program/about-heisc) as an initiative to help higher education institutions better protect their data, prevent the risk of https://www.upguard.com/blog/data-breach, and measure the cyber risk of third-party solution providers. Third-party providers also use HECVAT to demonstrate their https://www.upguard.com/blog/how-to-comply-with-hecvat and commitment to practicing strong data security.

The Cybersecurity and Infrastructure Security Agency (https://www.cisa.gov/) is proposing higher education institutions report certain ransomware payments within 24 hours and cybersecurity incidents within 72 hours.

By doing so, these higher education schools provide themselves a way to measure vendor criticality and better manage vendor relationship.

A higher education institution with an adequate IT budget could implement all these measures to solve application security and hacking issues.