IT security for universities and colleges
For the leadership, chancellor and head of IT at private preparatory colleges, private and smaller public universities and universities of applied sciences. We review your entire IT, from student and lecturer accounts through Microsoft 365 and the learning platform to the computers in labs and the library, together with your IT or your IT provider. We then close the gaps. We only make changes after your approval.
Sound familiar?
Teaching, exams, applications and administration run on Microsoft 365 and Teams, the learning platform and campus management. On top of that come the personal devices of students and lecturers, shared computers used by many people and your researchers’ data. Universities in Germany have had to manage without IT for weeks after ransomware attacks. You do not need a technical background for a conversation with us.
At the start of each semester hundreds of accounts are added for students, lecturers and visiting lecturers. People who leave often keep their access for months. Nobody knows exactly how many active accounts belong to people who left long ago.
A first-year student enters their password on a fake sign-in page. Shortly afterwards that mailbox sends emails to fellow students and lecturers. They look genuine because they come from your own institution.
An assistant such as Microsoft 365 Copilot shows everything an account has access to. If exam papers, grades or applications from international students sit in folders that are shared too widely, it finds them for people who should never see them.
You start with a manageable step at a fixed price and decide afterwards how to continue. Teaching and administration carry on as normal during the check.
30 minutes
You speak directly with Bastian Wenske, founder and managing director. We clarify which systems you run and who looks after them.
3 days, fixed price
On site we review accounts and permissions, Microsoft 365, the learning platform and campus management, personal devices, shared computers and backups. We change nothing.
Based on findings
Close the largest gaps first, done by your IT, your IT provider or us.
Your choice
We look after security on an ongoing basis, or your IT takes it over with documentation.
The IT security check answers that in writing, in plain language and with the next steps in order of priority. At a fixed price.
Two paths
Both paths lead to the same standard. After the check you decide which one fits your institution. Our case study of a private preparatory college shows what ongoing care looks like.
At a fixed monthly price we review security alerts, respond to incidents and report to your leadership every month on what has happened. Access, data and documentation stay with you.
Managed SecurityWe implement the measures and hand them over to your IT or your IT provider with documentation and written instructions. We usually implement with Microsoft, but that is not a precondition.
About the IT security checkWith fixed rules tied to enrolment, de-registration and the end of teaching contracts. Whoever arrives gets an account with the right permissions, and whoever leaves loses it after a set period, automatically where possible. The check shows how many accounts are orphaned today and who has more rights than they need.
No. We look at the systems and read out settings without changing anything, so lectures and exams carry on as normal. We agree the dates with you and are happy to avoid exam periods and the start of semester. From you we need a contact person and, at times, your IT or your IT provider.
The IT security check has a fixed price that depends on the size of your IT. You receive the written quote after the introductory call, before we start. If we then look after your security on an ongoing basis, a fixed monthly price applies, also agreed in writing beforehand.
Yes. Personal laptops and phones get access to email, Teams and the learning platform under clear rules, for example sign-in with a second factor and protected apps that keep the institution’s data inside them. This can be set up so that the institution has no access to private content on the devices.
Only the people at WCS who work on your project, and only as far as the work requires. We sign a non-disclosure agreement with every customer, and our employees present a certificate of good conduct before they are hired. Data and documentation stay with you, and where a project requires it we use consultants with a government security clearance.
Yes, for security. At a fixed monthly price we review security alerts, keep settings up to date, respond to incidents and report to your leadership every month. Your IT continues to handle day-to-day running. We have looked after a private preparatory college since July 2025 and now run its ongoing security operations.
Yes. WCS also works for public authorities and other public bodies. Public universities may have their own procurement rules. We clarify which apply to you in the introductory call and shape the quote accordingly.
In the introductory call (30 minutes, no obligation) we clarify:
Bastian Wenske
Founder & Managing Director
Prefer to reach out directly? Send us an email at [email protected].
Book an introductory call