McGraw Hill SIMnet HECVAT401-3-2025.xlsx

	A	B	C	D	E	F	G
2	HECVAT™ Solution Provider Response - Start Here					Version 4.01
3	Date Completed		3/5/2025
4	Instructions for Solution Providers
5	1. Complete the "Start Here" tab and review the "Required Questions" guidance to find the other sections are required for your product or service.
6	2. Complete the "Organization" tab and the applicable questions in each of the next 5 tabs (Product through Privacy) that apply, based on your answers to the "Required Questions."
7	3. Guidance in column E may change based on your answers to prompt details in "Additional Information." If leaving an answer blank, you must also state why in "Additional Information".
8	4. DO NOT complete any fields in the "Evaluation" sheets or the "Analyst Notes" column.
9	5. Return the completed file to institutions.
10	* Denotes critical questions. Critical questions are those deemed most important to institutions by higher education volunteers.
11	For full instructions, please visit educause.edu/HECVAT
12	General Information
13	GNRL-01	Solution Provider Name	McGraw Hill
14	GNRL-02	Solution Name	SIMnet
15	GNRL-03	Solution Description	Online Homework and Assessment products that include personalized learning expericneces and Microsoft Office Simulations.
16	GNRL-04	Solution Provider Contact Name	Torger Wuellner
17	GNRL-05	Solution Provider Contact Title	Director of Engineering
18	GNRL-06	Solution Provider Contact Email	torger.wuellner@mheducation.com
19	GNRL-07	Solution Provider Contact Phone Number	n/a
20	GNRL-08	Country of Company Headquarters	United States
21	GNRL-09	Employee Work Locations (all)	United States
22	Company Information		Answer	Additional Information	Guidance	Analyst Notes
23	COMP-01	Do you have a dedicated software and system development team(s) (e.g., customer support, implementation, product management, etc.)?*	Yes	Software and System Development teams include Software Engineering, Network & Systems, Course & Product Implementation, Content, SMEs, User Experience, Quality Control, Customer Support, Customer Implementation and Professional Development, Escalated Support and Enterprise Services. The total staff is in the hundreds.	Describe the structure and size of your software and system development teams. (e.g., customer support, implementation, product management, etc.).
24	COMP-02	Describe your organization’s business background and ownership structure, including all parent and subsidiary relationships.	McGraw Hill is a leader in educational texts, teaching tools, innovations and expertise for more than 100 years. McGraw Hill distributes its educational content and learning solutions in more than 100 countries, with over 50 offices worldwide. We partner with students, educators, administrators and other professionals to deliver engaging, adaptive and personalized solutions that improve performance and results. We combine proven, research-based content with the best emerging digital technologies to guide assessment, teaching and learning to achieve the best possible outcome for students, instructors and institutions. For well over a century, McGraw Hill has been a leader in providing trusted information and analysis to offer solutions that improve learning outcomes around the world. From the Industrial Revolution to the Internet Revolution, McGraw Hill has filled a critical need for information and insight by helping individuals and businesses in a broad range of markets. We've been at the intersection of teaching, research, and learning innovation. In 1888 James H. McGraw, originally a school teacher from upstate New York, purchases The American Journal of Railway Appliances, to meet growing demand for insight into the rail industry. John A. Hill serves as editor at Locomotive Engineer. The McGraw and Hill Companies merged to form the McGraw-Hill Publishing Company, Inc. in 1917. For more information, please visit: https://www.mheducation.com/about.html McGraw Hill School is a privately held company with both national and international operations. Owner: McGraw-Hill School Education Holdings, LLC. Parent Company: Platinum Equity Capital Partners V, L.P.		Include circumstances that may involve offshoring or multinational agreements.
25	COMP-03	Have you operated without unplanned disruptions to this solution in the past 12 months?	Yes	Incident triggered our incident mangement process.
26	COMP-04	Do you have a dedicated information security staff or office?	Yes	Yes, MH has a dedicated team of Cybersecurity engineers, architects, and analysts, reporting to the Chief Information Security Officer (CISO) who reports to the COO. The team also includes a 24x7 SOC to monitor and respond to cyberthreats.	Describe your information security office, including size, talents, resources, etc.
27	COMP-05	Use this area to share information about your environment that will assist those who are assessing your company's data security program.	All MH staff must pass background checks and take yearly trainings in data and privacy protection. Physical access to buildings is strictly controlled and monitored. Access to systems is restricted by role and uses two-factor authorization. Access to internal systems is restricted to company premises or through secure VPN.		Share any details that would help information security analysts assess your solution.		End Table Data
28	Required Questions		Answer	Additional Information	Guidance	Analyst Notes
29	REQU-01	Are you offering either a product or platform, as opposed to only offering a service	Yes		DO complete the Product and Infrastructure worksheets
30	REQU-02	Does your product or service have an interface?	Yes		DO complete the IT Accessibility worksheet.
31	REQU-03	Are you providing consulting services?	No		DO NOT complete the Consulting section in the Case-Specific worksheet
32	REQU-04	Does your solution have AI features, or are there plans to implement AI features in the next 12 months?	No		DO NOT complete the Artificial Intelligence (AI) worksheet
33	REQU-05	Does your solution process protected health information (PHI) or any data covered by the Health Insurance Portability and Accountability Act (HIPAA)?	No		DO NOT complete the HIPAA section in the Case-Specific worksheet
34	REQU-06	Is the solution designed to process, store, or transmit credit card information?	No		DO NOT complete the PCI-DSS section in the Case-Specific worksheet
35	REQU-07	Does operating your solution require the institution to operate a physical or virtual appliance in their own environment or to provide inbound firewall exceptions to allow your employees to remotely administer systems in the institution's environment?	No		DO NOT complete the On-Prem section in the Case-Specific worksheet
36	REQU-08	Does your solution have access to personal or institutional data?	Yes		DO complete the Privacy tab		End Table Data
37	Note: The "Organization" tab is required for ALL products and services.
38	Copyright © 2025 EDUCAUSE
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104