Profile

Thank you again! Paul Hebert CISSP CISA CDPSE| SUNY ITEC| 1300 Elmwood Ave Buffalo NY 14222 | 716-878-4832

HECVAT Lite 3.0 (https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit/hecvatlite300.xlsx) still only refers to CIS Critical Security Controls v6.1(not v8), NIST SP 800-171r1 (not r2), and NIST SP 800-53r4 (not r5). (It does add Trusted CI and PCI DSS 3.2.1.) ...

Awesome; thank you!

Will the updated HECVAT 3.0 (either Full or Lite) also update the crosswalks to CIS 18 and more recent NIST 800-171 and 800-53 updates? Will either update become available immediately after the Oct 29, 2021 announcement, or on some other schedule? Thanks in advance, Paul Hebert CISSP CISA CDPSE| SUNY ...

Roeland, Thank you for your very descriptive and helpful response. When you mention "MS Azure MFA does not comply with our standards for LoA2, we have another solution in place for that", could you elaborate on the solution you use to achieve LoA2 instead? Thanks again, Paul H. Paul Hebert ...