Documentation
HECVAT Full v3.0.6
Application/Service Security
APPL-06

Question APPL-06

Are only currently supported operating system(s), software, and libraries leveraged by the system(s)/application(s) that will have access to institution's data?

Weight25
High RiskYes
RequiredYes
Compliant AnswerYes

Standard Guidance

If the web application only works with a subset of modern supported browsers, please indicate that here.

Answering "NO"

State your plan to migrate to supported operating systems, libraries, and software.

Answering "YES"

Please provide a list of all required dependencies.

Reason for Question

Vendor responses to this question provide clarity on environment constraints that may exist and/or influence future development, configurations, infrastructure, etc. Although the vendor response may not directly affect end-users, the risks of the underlying infrastructure are better understood.

Follow-Up Inquiries

Follow-up inquiries for operating systems leveraged by the vendor will be institution/implementation specific.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]