Collaborate on vendor risk with other Texas agencies

Isora Lite is a success in the EDU community (K-12s, ISDs, and higher education institutions). It makes it easier for them to kick-start their vendor risk management (VRM) program while saving them valuable resources, encouraging better vendor relationships, and helping improve their overall security posture.

We want to replicate that success for Texas agencies. By introducing a standardized questionnaire framework like the Higher Education Cloud Vendor Assessment Toolkit (HECVAT), getting community adoption, and working with the Texas Department of Information Resources (DIR) on a centralized authentication method, we believe it's possible.

The Higher Education Cloud Vendor Assessment Toolkit (HECVAT) is a questionnaire framework designed to assess vendor risk for higher education. EDUCAUSE, Internet2, and REN-ISAC created it.

The HECVAT is free, maintained by infosec professionals, and anyone can easily crosswalk it to other major frameworks like NIST CSF, 800-53, 800-171, etc. Additionally, it covers all major information security and privacy issues, including those relevant to state and local government agencies.

It’s easy. Request an account by filling out the form, we’ll verify your eligibility, and we’ll send you login credentials.

In partnership with The University of Texas at Austin (UT Austin), our goal is to work with the Texas DIR to create a central authentication method that would make it even easier for any state agency to join.

Vendor assessments can remain private to your agency or be published and shared on the community database. Today, you can find over 150 completed HECVATs published by UT Austin.

Isora Lite is 100% free forever to Texas agencies.

We’d love to hear them. Say howdy!