A comprehensive security audit of a school's Google Workspace setup
Client
Date
Service
Project Overview
Conducting an audit of a secondary school’s Google Workspace setup is paramount for ensuring robust security and protecting sensitive information. As schools increasingly rely on digital platforms for administration, teaching, and learning, safeguarding data becomes critical. An audit helps identify potential security vulnerabilities, such as misconfigured settings, weak passwords, and unauthorised access. It ensures compliance with data protection regulations, thereby protecting student and staff information from breaches. Additionally, an audit can uncover gaps in user permissions and data sharing practices, allowing the school to implement stricter controls and training. This proactive measure not only protects the school’s digital infrastructure but also fosters a safer online environment for students and staff.
The Process
The audit of the secondary school’s Google Workspace setup began with me receiving admin access to thoroughly examine the system. I conducted a comprehensive 38 page review, identifying areas that could impact security and data protection. My findings were categorised into three levels of concern for the Senior Leadership Team.
Firstly, issues that SLT should be concerned about were highlighted, focusing on potential security vulnerabilities and data protection risks that need immediate attention. Secondly, I identified practices that SLT should be aware of, which, while not urgent, deviate from best practices and could benefit from review, particularly where policies, technology, or teaching and learning priorities might influence these practices. Lastly, I noted areas that SLT should note, providing context and suggesting that additional information or consideration may be beneficial.
In addition to these findings, I included recommendations to enhance the system’s security. These suggestions were clearly marked with “It is recommended that,” offering actionable steps to improve and secure the school’s Google Workspace environment effectively.
The Conclusion
The audit was turned around within 2 weeks.
"Sam worked with us on a Google audit which was much overdue. After spending some time with our Network Manager, he worked remotely onsite and produced a fully comprehensive document identifying areas of action required categorising them by urgency and preference. This has enabled us to move towards a more secure and efficient use of Google Workspace. Thank you Sam for your speed, efficiency and superb communication."