Vendor / 3rd Party Management
Your school's data doesn't just live in your systems. It flows through every app, platform, and service your staff and students use. We help you identify your third-party risk exposure, assess vendor practices, and ensure your contracts align with your obligations.
Know Your Third-Party Footprint
Most schools are surprised by how many third-party tools have access to student or staff data. We build a comprehensive inventory of every vendor, app, and platform that processes personal information on your behalf, the first step to managing the risk.
- Full inventory of third-party tools and platforms
- Identifies which tools have access to student or staff data
- Categorised by data sensitivity and access level
- Highlights tools that may not have been formally approved
Vendor Risk Assessments
Not all vendors pose the same risk. We run structured risk assessments for your highest-priority vendors, reviewing their security practices, privacy policies, and incident history, so you know which relationships need tighter controls.
- Risk assessments for high-priority or high-data-access vendors
- Review of vendor security certifications and privacy policies
- Assessment of data storage location and sovereignty
- Recommendations for additional contractual protections
Contracts and Ongoing Monitoring
A vendor risk assessment is a point-in-time view. We also help you put the right contractual protections in place and set up ongoing monitoring so you're notified when vendors have security incidents, change their data practices, or fall out of compliance.
- Data processing agreement (DPA) review and recommendations
- Contract clauses aligned to PDPA obligations
- Ongoing monitoring for vendor security incidents
- Annual vendor risk review as part of your compliance cycle
Get Started
Book a free 30-minute business assessment.
We'll review your current cyber and IT setup and show you exactly what your business needs. No hard sell. No commitment. Just a clear picture of where you stand.
Explore more
All Cyber Security features →Cyber Hygiene Report
Identify and address gaps in your school's security posture.
Staff Security Training
Keep your team alert and prepared for evolving threats.
Phishing Simulator
Test and train staff with realistic phishing simulations.
Vulnerability Assessment
Full risk assessment report delivered every cycle.
Incident Response Planning
A clear playbook so your team knows exactly what to do.
Vendor / 3rd Party Management
Manage and assess risks from external suppliers and vendors.
Access Control
Ensure only authorised personnel can access critical systems.
Cyber Hygiene Report
Identify and address gaps in your school's security posture.
Staff Security Training
Keep your team alert and prepared for evolving threats.
Phishing Simulator
Test and train staff with realistic phishing simulations.
Vulnerability Assessment
Full risk assessment report delivered every cycle.
Incident Response Planning
A clear playbook so your team knows exactly what to do.
Vendor / 3rd Party Management
Manage and assess risks from external suppliers and vendors.
Access Control
Ensure only authorised personnel can access critical systems.