HECVAT is less popular with vendors than it is with college and universities, but the vendors are coming around, Baylor CISO says.