Protect
Google Workspace Audit
A Google Workspace security audit for a secondary school, with a prioritised action plan.
The situation
Schools rely on Google Workspace for teaching and administration, so misconfigured settings, weak passwords and loose sharing put student and staff information at risk. This school’s audit was overdue.
What we did
We agreed nine areas to review, from user accounts and email security to file sharing, third party apps and data governance. After a short visit to meet the school's Network Manager, we worked through the admin console remotely, including the audit logs and the school's data policy.
Findings were sorted into three levels for the Senior Leadership Team: things to be concerned about, things to be aware of, and things to note. We then ran through the report in person with the Deputy Headteacher and colleagues, and gave the IT team a findings spreadsheet to work through. Any changes were made by the school's own IT team.
The outcome
The report was delivered three days after the site visit. The school's IT team has since worked through the findings.
Year
2024
Made for
A large secondary school in Hertfordshire
Our role
Security audit and report
What was delivered
An audit report in seven sections
39 findings in three levels of urgency
A findings spreadsheet for the IT team
A face-to-face session with senior staff
Sam worked with us on a Google audit which was much overdue. After spending some time with our Network Manager, he worked remotely onsite and produced a fully comprehensive document identifying areas of action required categorising them by urgency and preference. This has enabled us to move towards a more secure and efficient use of Google Workspace. Thank you Sam for your speed, efficiency and superb communication.
Andrew J
Deputy Headteacher, Hertfordshire Secondary
