Come Learn about HECVAT and Third-Party Risk Management for Your Campus! (Separate registration is required.)

Tuesday, September 29, 2026 | 8:00AM–11:30AM MT
Session Type: Additional Fee Program
Delivery Format: Preconference Programming

This interactive workshop will introduce participants to current privacy, security, and accessibility topics in the third-party risk management landscape. Participants will hear about core considerations relevant to reviewing and selecting third-party products and services best suited for campus deployment. Presenters will identify and discuss institutional stakeholders; provide examples of meaningful, productive security using HECVAT or other tools; describe privacy and institutional reviews with incorporated contractual considerations; and help you create new or streamlined processes. They will work through a HECVAT example and discuss workflow with campus stakeholders. They will also discuss the strategic importance of third-party risk management for AI tools on campuses. Institutional reviews may include vendor management, procurement, IT accessibility, legal, and many other aspects for campuses to prioritize. Participants will gain an understanding of the HECVAT and its advantages; hear how institutions are conducting third-party risk management and discussion areas to improve their vendor assessments; and gain an understanding of how higher education institutions perform third-party risk management. We will reserve time for your questions and for group discussion. Join us as we tear down the walls of complexity surrounding third-party risk management and equip you with the tools and resources to scale meaningful and productive reviews within your organization.

Outcomes of this workshop:

  • Understand current HECVAT, privacy, security, and accessibility topics in the third-party risk management landscape. Understand HECVAT’s advantages and where it can be used. 
  • Understand the stakeholders to potentially engage on your campus. 
  • Understand general workflows to use to adapt for your campus.

Note: Participants who successfully complete this preconference workshop will be eligible to receive an EDUCAUSE microcredential. To earn this digital badge, you must complete a brief workshop evaluation and share two key learning outcomes from your experience. All registered participants will receive an email on October 5 with instructions for completing these steps. Completion of both is required. To learn how to accept and make the most of your microcredential, visit the EDUCAUSE Microcredential website.

Presenters

  • Nick Lewis

    Senior Program Manager, Security and Identity, Internet2