Re: Using HECVAT for a vendor who leases copiers to the university

[Laura Raderman <lraderman () CMU EDU>]

Not ideal - it’s meant more for cloud providers, but some of the questions on data disposal could be used since I’m 
assuming some of these copiers/printers may store (if just temporarily) data.


Laura Raderman
ISO Policy & Compliance Coordinator
Carnegie Mellon University
lraderman () cmu edu

> On Aug 1, 2018, at 12:38 PM, Belsito, Louis D <belsito () ROWAN EDU> wrote:
>
>  
> I’m new to the HECVAT.  Would the HECVAT be an appropriate questionnaire for a printer/copier vendor who will be 
> leasing equipment to an institution? 
>  
> Lou Belsito
> Manager, Information Security Risk
> Rowan University
>  
> T: 856-256-5725