Version 1.0 - Last Updated: 20 Sep 2022

Your and our responsibilities in the event of a cyber-attack or security incident

Your responsibilities


If there is a cyber-attack or security incident that affects your student data system so you cannot make data returns to us, you must contact your HEP Account Manager within 24 hours of becoming aware of the incident.

You should check the following information and share this with your account manager.

  1. Are your contact channels secure? For example, can you use your emails, phone lines, Microsoft Teams or other communication platforms?

  2. Do you know if student finance data has been compromised?

  3. What systems do you still have access to?

  4. Can you still enter data on the HE Gateway? For example, can you confirm registration, attendance and change of circumstances or upload courses?

Print this chapter
Back to top