Announcing the Launch of SPAhc

July 10, 2026 by James Tucciarone III
Topic:
  • Announcements

On July 13, the Information Security Office (ISO) is launching the Security Planning Assessment Help Center (SPAhc) – pronounced 'spock'.

SPAhc is a new web-based workflow tool designed to guide you through the Security Planning Assessment (SPA) process from start to finish.

Key features of SPAhc

SPAhc simplifies the assessment process by offering:

  • A guided workflow: Step-by-step milestones to mark progress, starting with background information collection and ending at vulnerability scans.
  • Centralized management: In one location, address MSS requirements, track exceptions, and keep tabs on vendor and vulnerability issues flagged by the ISO.
  • Effective dashboards: View relevant SPA metrics, search for existing assessments within your departments, and copy your SPAs to create starting points for similar systems.

Who completes the SPA, and how to start one

Completing a SPA requires a technical understanding of the SPA’s IT system. As a result, SPAs must be handled by, or completed in close partnership with, IT support personnel. While the ISO provides guidance, it is the responsibility of the system owner to meet the MSS requirements for their IT system.

How to create an account

Starting July 13, only authorized Yale technical support providers and managers can access SPAhc. To request access:

  1. Navigate to cybersecurity.yale.edu/spa.
  2. Select Launch SPAhc.
  3. Log in with your Yale credentials.
  4. On the homepage, navigate to Request New Account.
  5. Briefly confirm your technical or IT Manager role. The system will send you an email notification once your account is active.

Resources and support

For documentation and guidelines, resources will be available on cybersecurity.yale.edu/spa as of July 13:

  • SPAhc Quick-Start Guide and User Manual
  • Example of creating a SPA
  • SPAhc video
  • Yale’s Minimum Security Standards (MSS)

The ISO will also hold an overview of how to use the SPAhc tool on Wed., August 5, from 10 - 11 a.m., as part of the Application Security Program Forum. View the meeting details and add to your calendar.

Need help?

Visit cybersecurity.yale.edu/spa or reach out to the team at information.security@yale.edu.