One Platform for all Your Cyber Compliance Needs

What You Get

• A starting assessment for edtech suppliers your school already uses.
• A central place to add local data-handling and usage context.
• Risk ratings that reassess as your school-specific information is added.

Why You Need It

• Schools should not need to repeat baseline due diligence on the same vendors.
• Supplier risk is more useful when it reflects how a product is actually used in your school.

What You Get

• Maintain a central cyber risk register with clear ownership, ratings and treatment actions.
• Connect risks to controls, critical assets and suppliers so teams can understand what drives exposure.
• Use dashboards to see high-priority risks, risks outside appetite and areas requiring management attention.

Why You Need It

• Cyber risk is difficult to manage when information is spread across spreadsheets, supplier lists and asset registers.
• A connected framework helps leaders understand which risks matter most and where to focus limited resources.

What You Get

• Assess your current position against recognised cyber frameworks and standards.
• Identify gaps and connect requirements with the controls, policies and tasks used to address them.
• Track compliance progress over time and prepare clearer reporting for executives, boards and stakeholders.

Why You Need It

• Compliance activity can become busy work if teams cannot see gaps, owners and evidence in one place.
• Clear compliance tracking helps prove progress and reduces the scramble before audits, reviews and board updates.

What You Get

• Use guided policy content to create practical cybersecurity policies and procedures.
• Assign policy owners, review dates and approval steps so documents stay current.
• Keep policy activity connected to the broader cyber GRC program rather than isolated in shared drives.

Why You Need It

• Policies only help when they are current, owned and connected to how the organisation actually works.
• A structured policy process gives teams confidence that expectations are documented and reviewable.

What You Get

• Assign owners, due dates and priorities for remediation work and recurring GRC activities.
• Maintain a structured calendar of reviews, assessments and improvement tasks.
• Give teams a clearer view of what has been completed, what is overdue and what needs attention next.

Why You Need It

• Cyber improvement programs lose momentum when actions live in meeting notes, email threads and disconnected lists.
• Task management turns GRC activity into accountable work that can be tracked, prioritised and reported.

What You Get

• Create consistent risk registers across departments without forcing every team into a cyber-specific model.
• Use a common risk lens for operational, financial, legal, people and strategic risks.
• Give leadership a consolidated view of risk while preserving local ownership and accountability.

Why You Need It

• Executives and boards need a consistent way to compare risks across departments, not a stack of unrelated registers.
• A shared risk approach helps each function manage its own obligations while improving whole-of-organisation visibility.

What You Get

• Manage obligations across internal policies, external standards and department-specific requirements.
• Record assessments, evidence, gaps and actions in one structured place.
• Report progress against multiple compliance areas without maintaining separate spreadsheets.

Why You Need It

• Non-cyber compliance can be just as fragmented as cyber compliance, especially across growing organisations.
• A central approach helps teams understand obligations, assign actions and show progress clearly.

What You Get

• Maintain policy ownership, review dates, approval history and version control.
• Help departments manage their own policies while following a consistent governance process.
• Reduce uncertainty about which policies are current and what needs review.

Why You Need It

• Company policies often become stale when review cycles and approvals are not actively managed.
• A consistent policy management process reduces ambiguity and supports stronger governance across departments.

What You Get

• Coordinate actions across departments with owners, due dates and status tracking.
• Manage recurring reviews, risk treatments, compliance actions and policy updates.
• Give managers clearer visibility of overdue work and upcoming governance activity.

Why You Need It

• GRC depends on follow-through, not just registers and policies.
• Shared task tracking helps teams turn governance decisions into visible action and accountability.

What You Get

• Build a reusable source of truth for common security, privacy and compliance answers.
• Speed up responses to customer and vendor questionnaires without starting from a blank page each time.
• Improve consistency by drawing from approved information and previous responses.

Why You Need It

• Security questionnaires slow down sales and partner reviews when answers are buried in old documents and inboxes.
• AI-assisted responses help teams move faster while keeping answers consistent and reviewable.

What You Get

• Create a central place to share security documentation and maturity information.
• Reduce repetitive assurance requests by making approved trust materials easier to access.
• Support sales, procurement and partnership conversations with a more professional trust experience.

Why You Need It

• Prospects and partners increasingly expect clear evidence of security maturity before they commit.
• A trust centre reduces repetitive manual sharing and helps present your security program with confidence.

What You Get

• Run scheduled checks across your public web environment.
• Identify common weaknesses that may need remediation or closer review.
• Connect technical findings with broader risk, compliance and reporting conversations.

Why You Need It

• Unknown web vulnerabilities create avoidable exposure and can undermine customer trust.
• Regular scanning gives teams a practical signal for prioritising fixes and showing ongoing security attention.

What You Get

• Give staff practical training on common cyber threats and safer day-to-day behaviours.
• Track completion so managers can see who has finished required awareness activities.
• Support compliance and board reporting with evidence of ongoing staff education.

Why You Need It

• People are often the first line of defence, but awareness fades without regular reinforcement.
• Training helps reduce avoidable mistakes and provides evidence that staff education is being managed.

What You Get

• Run simulated phishing exercises to understand where staff may need additional support.
• Help people learn from realistic scenarios without waiting for a real incident.
• Use campaign results to guide training, reporting and human risk reduction activities.

Why You Need It

• Phishing remains one of the most common ways attackers gain access.
• Simulation helps identify risky patterns early and turns mistakes into teachable moments.

What You Get

• Monitor for exposed staff credentials and breach indicators.
• Prompt action when compromised accounts or reused credentials create risk.
• Give security teams another signal for understanding and reducing human risk.

Why You Need It

• Exposed credentials can sit unnoticed until they are used in an attack.
• Monitoring helps teams respond sooner and reduce the risk created by password reuse and historic breaches.