Come Learn about HECVAT and Third-Party Risk Management for Your Campus! (separate registration is required)

Tuesday, April 28, 2026 | 12:30PM–4:00PM PT | California Ballroom B, Second Floor
Session Type: Preconference Workshop
Delivery Format: Additional Fee Program

This interactive workshop will introduce participants to current privacy, security, and accessibility topics in the third-party risk management landscape. Participants will hear about core considerations relevant to reviewing and selecting third-party products and services best suited for campus deployment. Presenters will identify and discuss institutional stakeholders; provide examples of meaningful, productive security using HECVAT or other tools; describe privacy and institutional reviews with incorporated contractual considerations; and help you create new or streamlined processes. They will work through a HECVAT example and discuss workflow with campus stakeholders. They will also discuss the strategic importance of third-party risk management for AI tools on campuses. Institutional reviews may include vendor management, procurement, IT accessibility, legal, and many other aspects for campuses to prioritize. Participants will gain an understanding of the HECVAT and its advantages; hear how institutions are conducting third-party risk management and discussion areas to improve their vendor assessments; and gain an understanding of how higher education institutions perform third-party risk management. We will reserve time for your questions and for group discussion.

Join us as we tear down the walls of complexity surrounding third-party risk management and equip you with the tools and resources to scale meaningful and productive reviews within your organization.

Presenters

  • Josh Callahan

    Chief Information Security Officer, California State University, Office of the Chancellor
  • Charlie Escue

    Information Security Manager, Indiana University
  • Jay Gallman

    Risk Advisor, Duke University
  • Tryphaena Hooper

    Chief Privacy Officer, University of Chicago
  • Nick Lewis

    Senior Program Manager, Security and Identity, Internet2

Resources & Downloads

  • Powerpoint presentation in PDF format 1

    Updated on 4/29/2026