4-4. ATTACHMENT FOUR - HECVAT.pdf

This attachment is a vendor assessment tool specification document for the University of Texas at Austin related to an Extended Education Ventures Instructional Design contract opportunity. The document outlines the University's use of the Higher Education Cloud Vendor Assessment Tool (HECVAT) as an evaluation mechanism for third-party products and services that will access, process, or host University data. The attachment provides reference links to HECVAT instructions, licensing information, and the vendor product security assessment form, directing interested vendors to the University's security and risk assessment portal at security.utexas.edu.

The HECVAT is a standardized assessment instrument used by higher education institutions to evaluate the security and compliance posture of cloud-based vendors and services. Vendors submitting proposals in response to this RFP should anticipate completing a HECVAT questionnaire as part of the University's evaluation process, particularly if their proposed solution involves cloud infrastructure, data hosting, or access to institutional data. The assessment tool facilitates the University's risk management protocols and ensures vendor compliance with institutional security standards and requirements.