Security and privacy

Know where your information sits, and who can use it.

Your learners and team rely on you to handle information carefully. onCourse provides individual accounts, configurable roles and documented authentication controls. ISH operates and maintains the managed platform on AWS with customer data stored in Australia, and works with you to confirm the data flows and responsibilities for your organisation’s arrangement.

What this helps your team do

Manage user access
Set authentication requirements
Review hosting and recovery arrangements

Shared service responsibilities

People
- Users
- Responsibilities
Access and data
- Authentication
- Permissions
- Handling
Service
- Hosting
- Recovery
- Evidence

Illustrative responsibility layers. Controls and responsibilities depend on the agreed service configuration.

An established platform, shaped around your organisation.

Already part of onCourse: User accounts, role permissions and documented authentication controls, including two-factor authentication settings, are established platform capabilities.
Set up for your organisation: Define roles, account responsibilities and authentication settings. Confirm the hosting, data location and service details that apply to your arrangement.
Additional work, where needed: An identity integration or requirements beyond the existing service need an explicit design and scope. We discuss any additional assurance evidence or service requirements with you and confirm what can be provided in the agreed scope.

We confirm the capabilities, setup and any additional work included in your arrangement before you start.

Managed cloud service

Your organisation’s setup. A platform that keeps improving.

ISH already operates and maintains onCourse. We set up your organisation, help your team get started and keep the platform running and improving, while your settings and workflows stay your own. onCourse is delivered as a managed cloud service on AWS, with customer data stored in Australia.

Your organisation’s setup
Your courses, users and workflows are configured for the way your organisation works.
Managed cloud service
ISH operates and maintains onCourse on AWS, with customer data stored in Australia.
A platform that keeps improving
Each customer keeps their own settings and workflows while the shared platform continues to improve.

What we look after

Hosting on AWS in Australia
Platform operation, maintenance and improvements
Support with your agreed setup

What you control

Your courses and classes
Your authorised users
Your organisation’s settings and workflows

Review the dated assurance and evidence index

Give people the access their work requires.

Use individual accounts and configured roles to control what people can see and change. Agree authentication requirements, including the documented two-factor settings, and test representative staff roles against their responsibilities.

Understand the managed service and its boundaries.

ISH looks after platform operation, maintenance and improvements. Your team manages its authorised users, course work and agreed settings. We review storage, connected systems and relevant data flows with you so the service responsibilities are clear.

Review recovery and support for your proposed use.

Before your team relies on the service, review the recovery approach, support arrangements, escalation responsibilities and evidence relevant to your scope. Bring any identity or additional security requirements into that discussion so they can be assessed explicitly.

More capabilities in this area

Give people appropriate access: Use individual accounts, configurable roles and permissions to match access to each person's responsibilities.
Set account and authentication rules: Apply documented security settings, including two-factor authentication, according to your organisation's requirements.
Understand service and recovery responsibilities: Discuss hosting, data location, backup, recovery, support and escalation responsibilities for the proposed service.
Review current evidence: Request the technical and assurance information relevant to your review rather than relying on broad claims.

Hosting and data location
Access controls
Authentication options
Data handling
Backup and recovery
Service responsibilities
Payment handling
Assurance information

Explore how it works

Follow practical tasks for the work your team needs to complete, with links to the full official onCourse handbook articles.

All onCourse guides

What would you like your team to be able to do next?

Bring a course, a practical question or a change you have in mind. We can look at relevant onCourse examples, your setup and any work to agree separately.

Talk through your security requirements Explore onCourse