Profile

Where can I see the delta Usually, there is a sheet called "changelog" that details the changes made. It might be hidden by default. is there a way to sign up to be notified when new versions are published? I, too, would like to know this. Bradley Wagner VP Product, Hannon Hillp. 678-904-6900 x115w. ...

Thanks Mark. I didn't mean to derail the discussion here. The RAMP programs seem like they could at least complement if not eventually replace HECVAT or even SOC 2, and I was curious about what others were thinking about them.

Vendor here. We have a HECVAT but I'm curious how many of you are looking ahead at programs like State RAMP (or Texas's model TX RAMP) when thinking about infosec for applications. Is anyone using that as alternative to HECVAT or in addition to it? Bradley

As a vendor, I'll admit we've had trouble figuring out how to answer various questions in the HECVAT due to our use of IaaS and PaaS tools like AWS and Heroku. I totally understand where Michael and others are coming from in needing more from vendors than just pointing to AWS or Heroku's security information. ...

Thanks Josh. That seemed to work pretty well for Columns C & D below lines 24 in the HECVAT Lite. Somewhere above that I was getting errors about pasting into merged cells. Should note that CHNG and PPPR do not appear in the HECVAT Lite in case others are looking for those.

Yea same question here. Is copy pasting from one to the other the best way? -- Bradley Wagner VP Product, Hannon Hillp. 678-904-6900 x115w. www.hannonhill.come bradley.wagner@hannonhill.com

I'm also looking at HLDA-07 "Does your staff (or third party) have access to Institutional data (e.g., financial, PHI or other sensitive information) within the application/system?" and it doesn't seem to matter what value we put into that cell. Something about a compliance override: Yes Yes Compliant ...

Ah ok, I just saw your other thread about the IT Accessibility scoring Jay https://connect.educause.edu/community-home/digestviewer/viewthread?GroupId=511&MessageKey=697b04da-0634-4323-b822-07b51b8a90ed&CommunityKey=dd48df3c-8db8-4551-a9e5-a393b7a15e40&hlmlt=VT ------------------------------ Bradley ...

Thanks Jay. As a vendor, we too noticed some of these issues recently including the appearance of HLDC in High-Risk Non Compliant when we selected "Yes". We're wondering if it's appropriate to change these Preferred Values in the Analyst Report for these where it appears to be fairly obviously incorrect. ...