HECVAT: Higher Education Community Vendor Assessment Toolkit
EDUCAUSE's vendor security questionnaire. A completed HECVAT is one of the attestations the self-disclosure accepts for a product's security posture.
Library
The ICAA Documentation Library: standards, implementation guidance, model practices, templates, assessments and training. Public documents are free to download; the rest is included with membership.
Toolkit & Templates
Procurement language, scorecards and ready-to-edit templates.SDPC National Data Privacy Agreement (NDPA)
The Student Data Privacy Consortium's national agreement template. A signed agreement consistent with it is the first control of credential A, and "SDPC National DPA" is…
Student Data Privacy Consortium (SDPC) resource registry
The consortium's registry of signed agreements by state and alliance, where districts and vendors find and record data privacy agreements.
Student Privacy Pledge (Future of Privacy Forum)
The industry pledge on the handling of student data that many education vendors sign; a public commitment districts may ask a vendor about beside its signed…
The whole library comes with membership
District, vendor and hub members each see the documents written for them, and Advanced members get the full toolkit.