Documentation
HECVAT Lite v3.0.6
Documentation
DOCU-01

Question DOCU-01

Have you undergone a SSAE 18 / SOC 2 audit?

Weight15
High RiskNo
RequiredYes
Compliant AnswerYes

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Describe any plans to undergo a SSAE 18 audit.

Answering "YES"

Provide the date of assessment and include a SOC 2 Type 2 (preferred) or SOC 3 report. If you have a SOC2 or SOC3 report, state how to obtain a copy. Indicate if your hosting provider was the subject of the audit.

Reason for Question

Standard documentation, relevant to institutions requiring a vendor to undergo SSAE 18 audits.

Follow-Up Inquiries

Follow-up inquiries for SSAE 18 content will be institution/implementation specific.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]