Few areas of higher education cybersecurity and privacy require as much careful review as third-party risk assessments. The Higher Education Community Vendor Assessment Toolkit™ (HECVAT) has become an important resource for gathering information about a vendor's security, privacy, accessibility, and compliance practices. At the same time, reviewing HECVAT responses can require significant time and expertise, particularly when assessing complex services and identifying potential areas of concern.
Since the emergence of readily available generative AI tools, security and privacy professionals have begun exploring how AI might support the HECVAT review process. Some view AI as a valuable tool for identifying risks, summarizing responses, and highlighting gaps, while others question its reliability.
In this webinar, we'll examine both the opportunities and challenges of using AI in HECVAT reviews. Join us to learn how AI can help analyze vendor responses, ask more effective follow-up questions, identify potential risk indicators, and support assessments. We'll explore where AI can add value, where caution is warranted, and how institutions can responsibly incorporate AI into HECVAT evaluations while ensuring that human expertise and professional judgment remain at the center of the review process.
Learning Outcomes:
EDUCAUSE provides real-time AI captioning for all online events, in the main room and also in breakout rooms. To request any additional accommodations and/or services, please send an email to [email protected] or call (303) 449-4430 for assistance.
Please review the EDUCAUSE Virtual Event Policies and Expectations for detailed information. View EDUCAUSE Virtual Event Policies and Expectations→
