Use this checklist to track HECVAT compliance efforts, internally and with your third-party vendors.