The list of documents keeps on rolling……
Thanks to the QGIS Intl group we have a HECVAT for for Educational Groups. From the Educause website:
The Higher Education Community Vendor Assessment Toolkit™ (HECVAT) is a tool designed to help college and university professionals more easily measure vendor risk.Created by leaders in higher education in collaboration with EDUCAUSE, Internet2, and REN-ISAC, the HECVAT is a comprehensive questionnaire that companies can complete to provide a detailed picture of their cybersecurity, privacy, IT accessibility, and compliance standards in one place—helping higher education leaders make better technology decisions, faster.