Cyber risk is again the leading concern for non-government schools in Australia this year, and 25% have experienced a breach, an Aon survey has found.

The number two concern is ability to attract and retain talent, followed by mental health of staff and students, privacy/data breaches, and changes to legislation and regulation.

The 306 schools surveyed included Anglican, Catholic, Islamic, Jewish and Uniting Church schools, plus Montessori, Steiner and non-denominational institutions.

Aon’s latest Independent Schools Risk Report says schools increasingly rely on digital technologies to support teaching, learning, administration, finance and communications. As a result, cyber resilience has become key.

“Cyber risk is no longer simply an IT issue for schools. It is a governance priority that can influence every aspect of school operations, from teaching continuity to financial management, student safety and community trust,” Aon leader of education for Australia Lachlan Bowden said.

“Leadership teams need confidence that cyber risks are understood, managed and governed effectively.”

Aon says 81% of independent schools outsource IT functions, and boards should work on third-party risk management, incident response and business continuity.

The global broker notes “readiness matters more than sophistication” and for schools, cyber resilience can be “driven less by advanced systems and more by strong basics”.

It recommends clear priorities, reduced exposure and confidence in how incidents will be managed, stating preparedness and response often matter more than budget size.

Also in the top 10 concerns are declining enrolments; economic slowdown; brand and reputation; allegations of child abuse; and future funding.

Three of the top 10 risks identified relate to finance, and Mr Bowden says cost pressures and uncertainty on funding policy are driving these concerns.

See the report here.