Question HLIH-03
Do you carry cyber-risk insurance to protect against unforeseen service outages, data that is lost or stolen, and security incidents?
| Weight | 20 |
| High Risk | No |
| Required | Yes |
| Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
State plans to acquire insurance or your compensating controls.
Answering "YES"
Summarize your cyber insurance strategy.
Reason for Question
Vendor responses to this questions need to be evaluated in the context of use case, data criticality, institutional risk tolerance, and value of the software/product/service to the institution's mission.
Follow-Up Inquiries
Follow-up inquiries for cyber-risk insurance will be institution/implementation specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]