General Information
General Information covers controls and questions related to that domain. It outlines expectations institutions typically require from vendors. The category helps assess risk posture and operational maturity. It provides structure for consistent evaluation during security reviews.
Assessment Questions
| ID | Question | What it covers |
|---|---|---|
| GNRL-01 | Solution Provider Name | Identification is the purpose of this field, which captures the official name of the company or organization providing the solution under assessment. The Higher Education Community Vendor Assessment Toolkit (HECVAT) starts with basic identifying information to establish who is being assessed. |
| GNRL-02 | Solution Name | Identify the name of the software solution, product, or service being assessed in this security review. In the HECVAT (Higher Education Community Vendor Assessment Toolkit), this is a basic identification question that helps establish which specific offering is being evaluated. |
| GNRL-03 | Solution Description | The 'Solution Description' question in the HECVAT (Higher Education Community Vendor Assessment Toolkit) is asking you to provide a comprehensive overview of your product or service. This question serves as a foundational element of the security assessment, allowing the evaluating institution to understand what your solution does, how it works, and what security considerations might be relevant based on its functionality. |
| GNRL-08 | Country of Company Headquarters | State the country where your company's headquarters or main office is located. This information is important in a security assessment for several reasons: |
ResponseHub is the product I wish I had when I was a CTO
Previously I was co-founder and CTO of Progression, a VC backed HR-tech startup used by some of the biggest names in tech.
As our sales grew, security questionnaires quickly became one of my biggest pain-points. They were confusing, hard to delegate and arrived like London busses - 3 at a time!
I'm building ResponseHub so that other teams don't have to go through this. Leave the security questionnaires to us so you can get back to closing deals, shipping product and building your team.
