Office for Students Selects SureCloud
GDPR & Cybersecurity Secured Since 2017
The OFS Challenge
Challenge
The Office for Students (OfS) is the independent regulator of higher education in England, responsible for ensuring that all undergraduate and postgraduate students, whatever their backgrounds, have a fulfilling experience of higher education which enriches their lives and careers and delivers value for money.
They are headquartered in Bristol, with a workforce of around 450 people.
Higher Education Funding Council for England (HEFCE), Office for Students’ predecessor, become a client of SureCloud back in 2017, implementing the GDPR Data Privacy Management Suite to support and enhance their GDPR programme.
As a new organisation and a successor of HEFCE, Office for Students has been looking to mature its approach to risk management. The focus of this for the team was initially to improve risk policies and procedures, to develop internal capability, enhance reporting to show transparency and allow challenge, and to identify and manage risks enterprise-wide systematically.
These improvements established a highly effective risk management approach, but the organisation soon hit the ceiling in terms of their process supporting risk systems, with technology being a limiting factor rather than an enabler.
The organisation was relying on numerous disparate spreadsheets to assess and monitor different types of risk – these were inconsistent, time-consuming and error-prone.
Office for Students needed a single, seamless, enterprise-wide solution to manage and monitor all aspects of risk management.
Solution
- A central view of risk across the organisation via a single intuitive dashboard
- Risks organised across divisions, legal entities, business functions, and geographies
- The ability to provide a central repository for enterprise risk, allow the organisation to show the entirety of the risk environment
- and consider overlaps and interdependences
- A range of risk management methodologies to understand the likelihood, impact and overall risk rating
- Configurable drillable dashboards and reports to provide a real-time snapshot of risk at anytime
Result
“It’s dynamic and agile – if we want to get a snapshot of risk for a particular department or function, we can.”
Intuitive & Easy-to-Use Solution
“Despite us being at the start of our risk management journey, we are very pleased with how quickly staff can get to grips with the SureCloud Platform, this was a key factor for us” commented Whitestone.
“They can more or less log on and go – it’s extremely intuitive and easy-to-use. In turn, this means that it frees up a huge amount of time spent manually inputting or transferring information, which is a great advantage for us.”
Systems & Culture Working Together
“We undertook a great deal of work to evolve our culture of risk management, to one that was far more consistent and proactive,”
With SureCloud’s Risk Management solution in place, we have the systems to underpin that culture, and enable us to take a far more streamlined, agile and accurate approach to help manage risk across the organisation.”
Integrated GRC that’s right for you
The apps OFS use to streamline GRC
Complaince Management
Manage, continuously test and report on your compliance status
Compliance ManagementRelated Resources
- Compliance
Achieve NIS-2 Compliance with Confidence - Whitepaper
Your essential guide to NIS-2 compliance: navigate key requirements, mitigate cybersecurity risks, and streamline compliance with SureCloud’s powerful GRC platform.
Read More- Compliance
- DORA
Ensure DORA Compliance: Download the Essential Cheatsheet
Download SureCloud’s free cheat sheet on DORA, covering key compliance areas like risk management and resilience testing. Be DORA-ready today
Read More- Compliance
The Guide to Security Compliance Maturity
Download SureCloud’s Guide to Security Compliance Maturity. Discover a proven roadmap to enhance compliance, reduce regulatory risks, and build operational resilience across your organization.
Read MoreExplore more case studies
"SureCloud gave us the flexibility to design our own user journeys and reporting tools."
How Autotrader are automating and streamlining their risk and compliance programs with SureCloud
Read Case Study“We wanted to collate this into a single platform for greater efficiency, which we’ve now been able to achieve with SureCloud.”
How Barratt achieved efficient and effective management of their GDPR obligations
Read Case Study“SureCloud’s solution has brought a comprehensive clarity to data processing that was impossible to achieve with spreadsheets.”
How Everton FC spend 75% less time documenting their processing activities and data protection impact assessments
Read Case Study