Cyber Risk in Schools Named Top Concern by Australian Independent Schools, Aon Report Finds
Cyber risk in schools has overtaken every other concern for Australian independent schools. That’s according to new research from Aon plc (NYSE: AON). Aon’s 2026 Independent Schools Risk Report found that one in four surveyed schools faced a cyber incident in 2026. That’s up from one in five in 2024.
Schools now depend heavily on digital tools. They use them for teaching, learning, administration, finance, and communications. This growing reliance has pushed cyber resilience to the top of the governance agenda for school boards and leadership teams.
Cyber Risk in Schools Becomes a Governance Priority
“Cyber risk is no longer simply an IT issue for schools. It is a governance priority that can influence every aspect of school operations, from teaching continuity to financial management, student safety and community trust,” said Lachlan Bowden, practice group leader of education for Australia at Aon. “As schools continue to embrace digital technologies, boards and leadership teams need confidence that cyber risks are understood, managed and governed effectively.”
Schools are responding. Aon’s report found that 76 per cent of schools now document preventative measures to manage cyber risk. That’s up from 66 per cent in 2024. Meanwhile, 81 per cent of schools outsource IT functions to third-party providers. This trend adds urgency to strong governance across both internal operations and external vendors.
Board Confidence Still Lags Behind Preparedness
Preventative controls keep improving. Even so, the report points to a gap between how schools perceive cyber risk and how confidently their boards can govern it. School leaders recognise the threat. But researchers found boards can strengthen governance further by deepening their understanding of technology risk. Preparedness should extend beyond technical safeguards. It needs to cover incident response, business continuity and third-party risk management too.
The report recommends four areas of focus. These are board education, independent assessment of third-party providers, incident preparedness, and investment aligned to organisational risk.
“Cyber resilience is built through preparation, not perfection. Schools that establish strong governance, understand their digital ecosystem and prepare for incidents will be better placed to respond when cyber events occur,” Bowden said.
About the Survey
Aon has run its Independent Schools Risk Survey every two years since 2014. The survey gathers insight from education professionals on the risks facing the sector. The 2026 survey ran from January to March. It drew responses from 306 independent schools across every Australian state and territory except the Northern Territory. Participating institutions included non-denominational and religious schools. Some offered special assistance programs, and others followed Steiner and Montessori models.
For this survey, an independent school means a non-government school that operates outside state and territory education departments. It typically answers to its own board rather than a church or government authority.
The findings reflect participating schools’ views at the time of the survey. They don’t represent all independent schools in Australia. You can view the full report at schoolsriskreport.aon.com.au.
About Aon
Aon plc (NYSE: AON) exists to shape decisions for the better. The firm works to protect and enrich the lives of people around the world. Aon’s colleagues combine analytic insight with integrated Risk Capital and Human Capital expertise. They serve clients in more than 120 countries with locally relevant solutions.
Stay Informed With Cyber News Live
Cyber threats are constantly evolving, and staying informed is critical to protecting your organization. Follow Cyber News Live for the latest cybersecurity news, threat intelligence, expert analysis, and practical guidance to help strengthen your cyber defenses.