The HECVAT is a questionnaire framework specifically designed for higher education to measure vendor risk. Vendors may be required to complete a HECVAT Assessment to confirm that information, data, and cyber security policies are in place to protect your sensitive institutional information and constituents’ PII.