Question THRD-03
What legal agreements (i.e., contracts) do you have in place with these third parties that address liability in the event of a data breach?
| Weight | 25 |
| High Risk | No |
| Required | No |
| Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
EDUCAUSE provides no guidance here
Answering "YES"
EDUCAUSE provides no guidance here
Reason for Question
Knowing the protections and legal agreements in place for third-party data sharing may assists analysts in determininng residual risk.
Follow-Up Inquiries
Follow-up inquiries concerning legal agreements with third-parties will be institution/implementation specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]