[Qgis-psc] QGIS Security Assessment

Régis Haubourg regis at qgis.org
Sun Oct 26 06:12:02 PDT 2025


Hi Heather,
please have a look at this file : 
https://discourse.osgeo.org/uploads/short-url/27LL3BD2NtzriuK60hBBfZAdrv6.xlsx 


This is our first version of HECVAT. Scores are really poor because 
HECVAT is fully designed to describe Cloud applications, which QGIS is not.

I hope this will help your teachers and students benefit from QGIS 
installations so that they can learn GIS with the most data respectful 
tool you can imagine. We collect nothing. You stay fully in control of 
your data.

Best regards

Régis, on behalf of the QGIS's PSC and security team.

On 10/16/25 10:12, Régis Haubourg wrote:
> Hi Heather,
> Please have a look at
>
> https://qgis.org/resources/support/faq/#how-can-i-get-a-vpat--hecvat--other-us-compliance-form-or-information 
>
>
> QGIS is a free and open source project.
> QGIS.org is not a product provider as such and we can't fill up 
> thousands of such queries for each country in the world. All the 
> information about how our project is driven is fully opened on 
> internet and any service provider could fill it for you.
>
> If by chance you happen to fill one for QGIS, please end it back to us 
> so that we put it on our website and all the others will benefit from 
> your work.  This is a good way to contribute back to the project that 
> comes totally for free for you.
>
> Best regards
> Régis - PSC elected Member
>
> On 10/10/25 16:59, 'Heather Persaud' via security wrote:
>> To whom it may concern,
>>
>> Rock Valley College has recently enhanced its cybersecurity measures 
>> and is now conducting a comprehensive assessment of all software and 
>> web applications utilized on our campus. Our records indicate that we 
>> do not have an assessment on file for your organization. Please 
>> provide a HECVAT assessment or an equivalent document. If you do not 
>> have one readily available, we have attached a template for your 
>> convenience.
>>
>> Best regards,
>>
>> Heather Persaud
>> Administrative Assistant
>> H.Persaud at RockValleyCollege.edu<mailto:H.Persaud at RockValleyCollege.edu>
>> T: 815-921-4807
>>
>> [cid:image001.jpg at 01DC39CC.7B866870]
>>
>>
>



More information about the QGIS-PSC mailing list