Solution Provider Name
Explanation
Identification is the purpose of this field, which captures the official name of the company or organization providing the solution under assessment. The Higher Education Community Vendor Assessment Toolkit (HECVAT) uses this information to identify who is being assessed and to maintain accurate records.
Why it's important in a security assessment:
- It establishes the legal entity responsible for the solution and its security practices
- It allows the assessor to verify your company against public records and other documentation
- It serves as a reference point for the entire assessment
- It helps in tracking compliance history and maintaining documentation
How to best answer it:
Provide your company's full, legal business name as it appears in official documentation. Do not use abbreviations unless they are part of your legal name. If your company operates under multiple names or has a DBA (Doing Business As) name, you should provide the primary legal entity name and can optionally note the DBA name in parentheses.
This seems like a simple question, but accuracy matters for legal and compliance purposes. The name you provide should match what appears on contracts, terms of service, and other legal documents.
Example Responses
Example Response 1
Secure Cloud Solutions, Inc.
Example Response 2
DataGuard Technologies LLC (DBA: DataGuard Security)
Example Response 3
Our company is still operating under our founder's name as a sole proprietorship: John Smith IT Consulting We are in the process of incorporating as Smith Security Solutions, Inc., but that process will not be complete for another 2-3 months For this assessment, please use John Smith IT Consulting as our official provider name.
Context
- Tab
- Infrastructure
- Category
- General Information
