Learning Lab | From Risk to Partnership: Making Vendor Reviews Work: January 2026

Part 1: January 12, 2026 | 12:00–1:30 p.m.ET
Part 2: January 15, 2026 | 12:00–1:30 p.m.ET
Part 3: January 21, 2026 | 12:00–1:30 p.m.ET
Part 4: January 28, 2026 | 12:00–1:30 p.m.ET

Overview

Vendor reviews are critical for protecting your institution and advancing its mission, but they don’t have to be overwhelming. In this lab, you’ll gain hands-on experience evaluating third-party tools and services for security, privacy, AI, and accessibility. Using real-world case studies, practical tools like the HECVAT, and guided assignments, you’ll build a scalable framework you can take back to your campus to streamline reviews, engage stakeholders, and strengthen vendor partnerships.

Learning Outcomes:

NOTE: You will be asked to complete assignments in between the live sessions that support the learning outcomes stated below. You will receive feedback and constructive critique from facilitators.

  • Identify key privacy, security, AI and accessibility risks in third-party tools.
  • Apply tools like HECVAT and safeguards like contracts to vendor reviews.
  • Engage institutional partners to strengthen review processes.
  • Design a scalable framework that balances risk, strategy, innovation, and partnership.

Facilitators

Photo of Andy Weisskopf
Chief Information Security Officer
Michigan State University
Photo of Alexander Magid
Alexander Magid
vCISO
Compass IT Compliance
Photo of Pegah Parsi
Chief Privacy Officer
University of California San Diego
Photo of Nick Lewis
Senior Program Manager, Security and Identity
Internet2
Photo of Jay Gallman
Risk Advisor
Duke University