Updated HECVAT Response - v3.03 now live!

[#1]

Atlassian’s Trust team now have now completed an updated response for the Higher Education Cloud Vendor Assessment Toolkit (HECVAT) version 3.03 for our Cloud products.

What is HECVAT?

The HECVAT is a structured questionnaire for Cloud Vendors to complete detailing many common operational, technical, and organizational controls that are relevant to Higher Education Colleges and Universities.

Many of our Support and Field Services teammates receive requests from customers to complete industry-standard questionnaires that detail our security, operational or enterprise programs which we now have incorporated those HECVAT responses. To ease this process the Trust team will continue evaluating additional questionnaires as appropriate.

Quick List of Tool Updates!

• We have added the HECVAT questionnaire to our existing set of questionnaires, including:

  • Cloud Security Alliance CAIQ questionnaire

  • CAIQ-Lite questionnaire

  • Standard Information Gathering (SIG) questionnaire

  • ISO27001/02 questionnaire

• We have added the HECVAT questionnaire to all of our Whistic Product Security Profiles.

  • Bitbucket Security Profile

  • Confluence Cloud Security Profile

  • Halp Security Profile

  • Jira Align Security Profile

  • Jira Cloud Security Profile

  • Opsgenie Security Profile 

  • Statuspage Security Profile

  • Trello Security Profile

Upon request, you can review the pre-compiled questionnaire responses.

If you would like to use Whistic to review the Atlassian documentation, please visit our Vendor Security and Risk Response page. It will direct you to a form where you must register in order for us to share our documentation.

If you would like to download the Atlassian HECVAT directly, see our HECVAT Resource page.

The Atlassian Trust team hopes to continue opening as many channels for our customers to self serve as the approach is more scalable for our customer service. We will continually evaluate services like this to support our strategy of being as transparent as possible.

Have questions? Contact our Atlassian Support.