The Australian schools threat picture
ACSC reports show schools as a recurring target. State-level guidance varies, NSW DoE has its own framework, VIC and QLD differ, but the federal NDB scheme cuts across all of them. The 30-day notification window for likely-serious harm makes incident detection time the binding constraint.
AI-native vendors available in AU
ESET via Chillisoft covers ANZ. Coro has Australian presence and education pricing. Sophos has a long-established AU/NZ team and Australian data residency for managed XDR. We pick the vendor combination that matches your existing infrastructure rather than forcing a particular stack.
Privacy Act + NDB scheme compliance
NDB requires notification within 30 days of becoming aware of likely-serious harm. AI-native detection compresses "becoming aware" from weeks to hours, which materially changes the regulatory exposure. Audit trails from the consoles support the evidentiary record OAIC expects.
Buying through state procurement
Each state has its own preferred-supplier list. KB navigates the state framework that applies to your school and provides the documentation pack the procurement office needs. For independent schools, direct purchase is straightforward; for state schools we work through the appropriate department.
Frequently asked questions
Are these products approved for Australian schools?
ESET, Coro, and Sophos are all available to Australian schools through preferred-supplier or direct-purchase routes. KB documents ACSC Essential 8 alignment and state-framework eligibility for the specific stack we recommend.
How fast must we report a breach?
NDB scheme: 30 days from becoming aware of likely-serious harm. AI-native detection compresses time-to-aware from weeks to hours, which is the practical lever for staying compliant.
Do vendors have Australian data centres?
Coro and Sophos offer AU regional hosting; ESET PROTECT cloud is hosted in EU (you can opt for on-prem if data residency is mandatory). We confirm residency requirements during scoping.