Industries · Education · Sydney · Western Sydney
Cyber security for Western Sydney education providers.
Western Sydney is home to one of the largest concentrations of education providers in Australia — Western Sydney University, multiple TAFE NSW campuses and one of the state's biggest government school clusters. IronSights works with education providers across Parramatta, Penrith, Blacktown, Liverpool and Campbelltown.
ISO 27001 certified. Microsoft certified. Sydney-based.
Our team
Cyber security delivered by a Sydney team.
IronSights is based in Sydney. When you need someone on-site — for an assessment, an incident, or a board briefing — we are not flying in from interstate. We can be at your campus the same day in most cases.
ISO 27001 and ISO 9001 certified. Microsoft certified security engineers. NSW Master Security Licence 000109187. Australian-owned, operating since 2017.
Meet the team →The threat context
Scale, diversity and budget pressure.
Western Sydney University enrols over 47,000 students across campuses at Parramatta, Penrith, Campbelltown, Hawkesbury, Bankstown and Liverpool, making it one of the largest universities in Australia by domestic enrolment. It holds research data, a significant international student cohort with ESOS Act obligations, and personal records across a diverse student population. As a university, WSU is directly subject to the federal Privacy Act and the Australian Privacy Principles — the same framework that applied to QUT when it suffered a Royal ransomware attack in December 2022, affecting 11,405 individuals.
TAFE NSW operates campuses at Nirimba, Granville, Bankstown, Liverpool and Werrington, covering one of the largest VET student populations in the country. TAFE NSW is a NSW government entity subject to the Privacy and Personal Information Protection Act 1998 and the NSW Government Cyber Security Policy. It holds AVETMISS data — the national VET statistical collection covering enrolments, completions and financial assistance — as well as student management records and third-party provider integrations that extend the attack surface significantly.
The Western Sydney Local Education Districts — Parramatta, Penrith, Blacktown, Liverpool and Campbelltown — collectively operate several hundred government schools, many running on the same Department of Education infrastructure with centralised identity management and shared platforms. Budget constraints in this cluster are real. Full-time security staff at school level is not the norm. What is common is an IT coordinator managing too many systems with too little specialist support.
IronSights provides the security layer that works around these resource constraints by identifying which gaps actually matter and fixing the right things first.
How we help
Services for Western Sydney education providers.
From a single government school to a multi-campus university or TAFE network — we size the engagement to what you actually need.
Security assessment
Scoped review of your actual environment — access controls, coverage, backup architecture, third-party integrations and incident readiness. Relevant for government schools, TAFE campuses and universities. Written report with prioritised findings.
Microsoft 365 security
Most Western Sydney education providers run under either the NSW DET agreement or their own licensing. We review and harden your tenant — , enforcement, Defender configuration, admin privilege management.
Managed security (Fortify)
24/7 managed detection and response for institutions that need continuous monitoring without an internal SOC. Scales well for multi-campus environments where a single IT team cannot cover all locations around the clock.
Incident response
, data breach or active intrusion: call 1300 004 766. We begin remote triage immediately and can be on-site at any Western Sydney campus the same day in most cases.
Common questions
Asked by Western Sydney education providers.
Not in this list? Call us on 1300 004 766 or book a 30-minute consultation. No obligation.
What compliance framework applies to NSW government schools in Western Sydney?
NSW government schools fall under the Privacy and Personal Information Protection Act 1998 (PPIPA) rather than the federal Privacy Act. They must also comply with NSW Department of Education data governance and information security requirements, including data classification policies and approved cloud storage arrangements. The NDB scheme does not directly apply to NSW government bodies, but the Department has its own mandatory notification process for significant data breaches.
Is Western Sydney University subject to the federal Privacy Act?
Yes. Although WSU is a public university established under NSW legislation, universities are not excluded from the federal Privacy Act the way state government bodies are under section 6C. WSU holds personal information for a large and diverse student population including a significant international student cohort, research participants and staff. That data is subject to the Australian Privacy Principles and the NDB scheme.
What are the most common security gaps in Western Sydney government schools?
The most common findings are: MFA not enforced across all staff accounts, backups connected to the same network as production systems (making them vulnerable to ransomware encryption), unreviewed third-party vendor access, and no documented incident response plan. These are not unique to Western Sydney — they are sector-wide patterns — but the combination of stretched IT teams and limited budgets means they persist longer without specialist input.
Do TAFE NSW campuses in Western Sydney have specific cyber security obligations?
TAFE NSW is a NSW government entity, so it falls under the PPIPA framework for privacy and the NSW Government Cyber Security Policy, which is mandatory for all agencies. TAFE NSW also holds AVETMISS data — the national VET statistical collection — which includes student enrolment, outcome and financial assistance records. Compromise of that data would trigger both internal and external reporting obligations.
Start here
Work with a Sydney-based team that knows Western Sydney education.
From a single government school to a multi-campus university or TAFE network — we size the engagement to what you actually need.
ISO 27001 and ISO 9001 certified. NSW Master Security Licence 000109187. Microsoft certified security engineers. Australian-owned. Sydney-based.