Name
Managing Cloud Vendor Risk at Scale: A Statewide Shared Assessment Model for Texas
Date & Time
Wednesday, May 20, 2026, 3:30 PM - 4:30 PM
Cam Beasley Drew Scheifele
Description

Texas ISDs and local governments increasingly rely on cloud-based vendors, yet many lack the staff, time, and tooling needed to perform consistent vendor risk assessments. With hundreds of vendors in use—and many not yet holding TX-RAMP authorization—small and mid-sized organizations are often forced to make risk decisions quickly, with limited internal security resources and little visibility into how peers are managing similar vendors. This session highlights a statewide Regional Security Operations Center (R-SOC) initiative designed to help ISDs, cities, counties, power and water utilities, as well as health districts manage vendor risk at scale through shared assessments and collaboration. The model enables cloud vendors to be assessed once—using standardized approaches such as HECVAT—and made available through a centralized vendor repository that agencies can leverage immediately. This approach reduces duplicated effort, accelerates risk decisions for operationally critical vendors, and allows smaller organizations to benefit from the collective work of larger, more mature programs. Attendees will learn how shared vendor assessments, peer usage visibility, and lightweight governance can improve consistency and efficiency across Texas SLED, while preserving local control over risk decisions and supporting agencies with limited security staffing.

Location Name
General Session Room Hall 2
Full Address
Palmer Events Center
900 Barton Springs Rd
Austin, TX 78704
United States
Session Type
Breakout