ISO 27001 & SOC 2,
at a price (and pace) that fits.

The Essential Eight is a cyber security framework developed by the Australian Cyber Security Centre (ACSC). It sets baseline controls to protect against common threats, and is increasingly expected for schools handling sensitive student and staff data.

Most schools reach Maturity Level 1 within 8–12 weeks. Zavior handles the gap assessment, remediation roadmap, and ongoing monitoring so your team doesn't need to lift a finger.

For most K–12 schools, Maturity Level 1 or 2 is appropriate. Zavior will assess your current posture during the discovery call and recommend the right target level for your school's needs.

Self-assessment is sufficient for most schools. However, when a formal third-party audit is required, Zavior works directly with your chosen auditor. If you don't have one, we can recommend trusted partners we've worked with. Our evidence preparation, documentation, and reporting are structured to align with the standards expected by notable Australian and international auditors, so you walk in ready.

Non-compliance can affect cyber insurance claims, increase regulatory scrutiny under the Privacy Act, and expose the school to reputational risk. Zavior helps you stay ahead of these obligations.

Not at all. Zavior is designed to work alongside your existing IT staff, not replace them. Your internal person can focus on day-to-day operations while Zavior handles the specialist domains of cyber security, compliance, and AI governance that typically fall outside a generalist IT role.

Yes. We coordinate directly with your consultant and agree who owns what up front, so you are not paying two parties to do the same work. Most of our engagements run this way.

Zavior complements your internal compliance function rather than duplicating it. Your compliance officer can focus on policy and governance while Zavior provides the technical implementation, ongoing monitoring, and evidence collection needed to maintain certifications like Essential Eight and ISO 27001.

Zavior works directly alongside your chosen auditor throughout the certification process. We prepare all evidence, documentation, and compliance reports in a format structured to meet the standards expected by notable Australian and international auditors. If you don't have an auditor yet, we can recommend trusted partners we've worked with, making the process smoother from start to finish.

No. Zavior integrates with your existing systems and works alongside what you already have in place. We assess what you have during the onboarding consultation and build around it.

Depending on the services, we start by understanding your current infrastructure and setup. Certifications like Essential Eight and AI Governance begin with a discovery call, while IT Managed Services are configured to work alongside your existing infrastructure and setup.

No lock-in. Zavior is an annual subscription. You can cancel before the next renewal period. We'd rather earn your school's trust every year.

We can work alongside existing providers, or take over fully, whatever makes sense for your school. We'll assess what you have during your free consultation and recommend the right scope.

One person can't cover cyber security, compliance management, IT infrastructure, staff training, AND stay up to date with the Privacy Act, all at once. Zavior is an entire team for a fraction of the cost of a single part-time hire.

Hardware and software monitoring, remote helpdesk support, server and firewall management, and proactive maintenance, keeping your school running without disruption.

Either. Zavior can work alongside existing providers or take over fully. We'll assess your current setup during onboarding and recommend the right approach.

We prioritise issues based on urgency. Critical issues impacting school operations are handled with priority response during business hours, with clear SLAs outlined in your plan.

Yes. Zavior manages identity, access control, email security, and admin configurations across both platforms to keep your school's environment secure and well-governed.

Yes. Through our partnership with Digitally Driven (a Google for Education partner) Zavior provides cyber security-aligned recommendations for devices and tools appropriate for your school. Where required, Digitally Driven can also assist with procurement activities.

Students and staff are already using AI tools daily. Without governance, schools risk data leakage, policy violations, and Privacy Act breaches. Zavior helps put the right guardrails in place before issues arise.

No. AI governance covers a broad range of tools including ChatGPT, Google Gemini, Microsoft Copilot, and other AI-enabled platforms used across the school network.

Yes. Together with our partner Aona AI, the setup covers policy creation, staff training, and enforcement of policies through Azure Entra ID and SSO, ensuring the right controls are in place across your school's environment.

While not explicitly mandated yet, AI tools that process student or staff data fall within Privacy Act obligations around data handling and consent. Zavior's AI governance framework ensures your school stays ahead of regulatory expectations.

Shadow AI refers to AI tools used by staff or students without IT or school leadership's knowledge, think personal ChatGPT accounts, browser extensions, or third-party tools. These can inadvertently expose student data, staff information, or confidential school documents. Through our partnership with Aona AI, Zavior can detect and inventory Shadow AI usage across your school network.

Through Aona AI's security guardrails, policies are automatically enforced to redact or block sensitive information (such as student PII, staff records, or confidential documents) from being submitted to external AI tools like ChatGPT or Copilot. Staff are guided toward secure practices in real time.

Yes. Aona AI includes a real-time AI coaching capability that provides in-context guidance, role-specific training, and best practices as staff work, helping them understand what's allowed, what's not, and how to use AI effectively and ethically in their day-to-day tasks.