Question DOCU-01
Have you undergone a SSAE 18 / SOC 2 audit?
| Weight | 15 |
| High Risk | No |
| Required | Yes |
| Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
Describe any plans to undergo a SSAE 18 audit.
Answering "YES"
Provide the date of assessment and include a SOC 2 Type 2 (preferred) or SOC 3 report. If you have a SOC2 or SOC3 report, state how to obtain a copy. Indicate if your hosting provider was the subject of the audit.
Reason for Question
Standard documentation, relevant to institutions requiring a vendor to undergo SSAE 18 audits.
Follow-Up Inquiries
Follow-up inquiries for SSAE 18 content will be institution/implementation specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]