GovScape
GovScape for universities and colleges

Thousands of students, staff and researchers. One clear view of the risk.

For universities, colleges and research institutions. GovScape shows what governance gaps are costing across faculties and departments, tracks readiness against the standards you’re asked for, and checks Microsoft 365 every day.

Where the money goes

Three areas you can recover. One risk, shown separately.

01

Operational inefficiency

Departments running their own processes for the same job, student and staff records kept in several places, and reports compiled by hand.

02

Technology waste

Software bought faculty by faculty, overlapping subscriptions, and licences for students and staff who’ve left.

03

Income lost

Fees, grants and research income that are hard to track when the records don’t match.

Never added together

Risk exposure

A breach of student or research data, a failed funder or partner audit, or an outage at enrolment, worked out as probability × impact.

Shown separately
Readiness

Standards you’re likely to be asked for.

Microsoft 365 · read-only · checked every day

What GovScape checks every day.

Read-only access that your IT admin approves and can withdraw at any time. Each issue lands in your 90-day plan with an owner and a date.

01 · daily

Accounts nobody has used in months: leavers, graduates and old project accounts.

02 · daily

Personal data turning up in documents where it shouldn’t be, and sensitive files without a label.

03 · daily

Who isn’t set up for multi-factor sign-in, and who has full admin access.

AI on campus

Know what’s in use, and who owns it.

Students and staff are already using AI tools. GovScape keeps an AI tools register with an owner for each tool, and tracks readiness against ISO/IEC 42001, the standard for using AI responsibly. You can see what’s in use and who’s accountable for it.

How it works

Put it in. See where you stand. Show the results.

01

Put it in

Describe your organisation, upload your policies and connect Microsoft 365.

02

See where you stand

Two figures, readiness, and a 90-day plan with an owner and a date on every task.

03

Show the results

Reports you can export and share, and figures that firm up as the evidence comes in.

Questions we get asked.

We’re a large organisation with a lot of Microsoft 365 accounts. Will the daily check cope?

Yes. The check runs in stages and picks up where it left off, so large estates are covered over successive runs.

Research partners and funders ask about our information security. Does GovScape help?

Yes. Your readiness, policies and approved evidence sit in one place, and you can share a read-only report with a partner or funder.

Does GovScape cover Cyber Essentials or funder-specific security requirements?

Not as standards today. GovScape tracks ISO/IEC 27001, NIST CSF and UK GDPR, which cover much of the same ground.

Find out what your governance gaps are costing you.

Book a demo and we’ll walk you through GovScape using an example from your sector.

Also for retail and manufacturing. Book a demo and we’ll start from your sector.