Question CHNG-03

Will the institution be notified of major changes to your environment that could impact the institution's security posture?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Describe plans to establish a notification mechanism for major environmental changes.

Answering "YES"

State how and when the institution will be notified of major changes to your environment.

Reason for Question

Notification expectations should be set earlier in the contract/assessment process. Timelines, correspondence medium, and playbook details are all aspects to keep in mind when assessing this response.

Follow-Up Inquiries

If the vendor's response does not cover the details outlined in the reasoning, follow-up and get specific responses for each, as needed.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]