NSW Auditor calls Compass, Sentral, School Bytes crown jewels

Digital Attitudes, 3 July 2026

The Friday read is one Auditor-General report that names Compass, Sentral and School Bytes as the three third party systems 98 per cent of NSW public schools trust with student information and only got classified as crown jewels earlier this year, one Anthropic model swap that puts Claude Sonnet 5 as the default across every paid tier including Team and Enterprise, one Claude Science public beta aimed at the same research computing stack Australian universities have been pointing at Nvidia BioNeMo for six months, and one Armenian ministry announcement that puts 50,000 free ChatGPT Edu and Codex seats into the country's schools and universities from the start of the 2026 to 2027 academic year.

NSW Auditor-General says Compass, Sentral and School Bytes only got classified as crown jewels earlier this year

David Hollingworth at Cyber Daily reported on Tuesday 30 June that NSW Auditor-General Bola Oyetunji tabled the Security and privacy of student information audit on Monday 29 June, finding that the NSW Department of Education did not classify Compass, School Bytes and Sentral as crown jewels until early 2026, and that the three products manage student information for more than 98 per cent of the state's 780,900 public school students. The audit logged 491 suspected data breaches involving student information across the three years to the end of 2025, catalogued more than 1,000 third party digital products the department has assessed against its security and privacy bar, and found that schools apply access controls inconsistently, that some staff retain access after they leave, that some schools use third party products bought outside the departmental marketplace, and that the department does not routinely verify vendor compliance in its own approved lists. The Auditor-General on the practice sitting under the policy: "schools apply access controls inconsistently, and some staff access more information than they need or retain access after they leave a school", and on the departmental role: the department "does not oversee or control staff access to third-party school administration systems." NSW Department of Education Secretary Murat Dizdar accepted the recommendations and committed to completing the strengthened governance and oversight arrangements by July 2027, aligned to the audit timeline. Cyber Daily on the NSW Auditor-General naming Compass, School Bytes and Sentral in the third party security audit, 30 June.

Why this matters: For NSW Department of Education chief information security officers and the Independent Schools NSW and Catholic Education Diocese of Broken Bay, Wollongong, Sydney and Parramatta IT directors writing the term 3 vendor risk register against the audit report the Auditor-General just tabled and the Reynella East 600 gigabyte leak the last fortnight of briefs priced, the operational read is that the interstate audit office has just put Compass, Sentral and School Bytes at the top of the state's crown jewels list two years after the vendors themselves started asking for that classification and 12 months after the OAIC opened the Children's Online Privacy Code consultation. The question the next term 3 vendor conversation answers is whether each school's staff access review, the joiner mover leaver workflow the SIS runs against the Microsoft 365 tenant, and the third party product allowlist the school council signed at the start of the year map cleanly to the four recommendations the Auditor-General named, or whether the school still has ex staff accounts open on the SIS the way the audit report says the sample sites did. For Victorian, Queensland, WA and SA department chief information officers reading the NSW audit against the equivalent third party assurance regimes each state has been building against the Australian Framework for Generative AI in Schools and the state cyber security policies each portfolio ministered, the read is that the audit office standard the interstate regulator has now published is the benchmark the auditor general of every other state will read across at the next audit cycle, and the question the next director-general briefing answers is whether the state's own SIS security posture (the Compass and Sentral estates in the Victorian government schools, the OneSchool platform in the Queensland Department of Education, the Manage It platform in the WA Department of Education) already carries the crown jewels classification and the assurance chain the NSW audit found missing. For the ASX listed and privately held Australian school SIS vendors selling into the K to 12 market (Compass Education, Sentral, School Bytes, Schoolbox, SEQTA, Edval, Synergetic), the procurement read is that the audit has now made third party assurance evidence the price of admission on the next contract renewal, and the vendor whose 2027 renewal cannot show a SOC 2 Type II report, a documented joiner mover leaver API, a staff access review workflow the school administrator can run without vendor support, and an incident response runbook the Department can call inside a public sector escalation window is the vendor whose next tender answers a chief information security officer reading the audit on the same day. The Auditor-General's snapshot of the report is at audit.nsw.gov.au.

Anthropic makes Claude Sonnet 5 the default across Free, Pro, Max, Team and Enterprise

Emma Thompson at EdTech Innovation Hub reported on Tuesday 30 June that Anthropic has made Claude Sonnet 5 the default model for Claude Free and Pro users, and that the change applies across every Claude subscription tier, from Free through Pro, Max, Team and Enterprise. The model succeeds Claude Sonnet 4.6 as a drop in replacement on the same API surface, and Anthropic Chief Technology Officer Rahul Patil named the reason customers should just swap the model string on their next deployment: "it's also a drop-in upgrade. Same API, same price, same speed targets as Sonnet 4.6. Swap the model string and you get better results immediately." Sonnet 5 carries introductory pricing through 31 August 2026 of USD $2 per million input tokens and USD $10 per million output tokens, with standard pricing from 1 September 2026 of USD $3 per million input tokens and USD $15 per million output tokens. The updated tokenizer may produce between 1 and 1.35 times more tokens than Sonnet 4.6 on the same input. Anthropic named the target use cases as multi file code changes, browser automation, autonomous agent operation across longer workflows, task planning across browsers and terminals, and self verification without explicit instruction. EdTech Innovation Hub on Anthropic making Claude Sonnet 5 the default for Free and Pro users, 30 June.

Why this matters: For the University of Melbourne, Monash, UNSW, USyd, ANU, UQ, Curtin, ANU and RMIT chief information officers running the Claude Enterprise, Claude for Education and Claude API contracts against the operational marking, research assistance and student support agents the campus AI programs put into term 2 pilots, the operational read is that the default model behind every user session in each of those tenants just changed underneath the existing prompt library, and the question the next architecture review answers is whether the prompts the faculty teams wrote against Sonnet 4.6 still hold their assessment rubric under the Sonnet 5 tokenizer or whether the 35 per cent output token blow out at the top of the range and the 1 September price step from USD $10 to USD $15 per million tokens rewrites the term 3 usage forecast the budget sub committee approved in April. For state Department of Education AI procurement teams running the ChatGPT Edu, Copilot with Commercial Data Protection and Claude for Education vendor comparisons against the AI Review Committee bar the federal panel set last year, the read is that the second frontier model provider has just cut headline input pricing to USD $2 per million tokens for the next two months, and the question the next AI vendor selection paper answers is whether the education tier deal each department is negotiating carries the introductory pricing through to the annual renewal or whether the September 1 step up moves the contract's true unit economics past the ChatGPT Edu benchmark before the state's own comparison spreadsheet updates. For ed-tech vendors building on the Anthropic API in the Australian school and university stack (Cogniti at Sydney, the Curtin AI teaching assistants, the ChatGPT Edu and Anthropic parallel deployments at UNSW, the local AI marking startups selling into the K to 12 sector), the procurement read is that the vendor whose product roadmap does not carry an August cutover plan against the Sonnet 5 tokenizer profile and a September pricing recalculation against the customer's own consumption pattern is the vendor whose 2027 renewal reads with the wrong unit economics on the first slide.

Anthropic launches Claude Science public beta on the same research computing stack Australian universities have been putting Nvidia BioNeMo on

Emma Thompson at EdTech Innovation Hub reported on Wednesday 1 July that Anthropic has opened Claude Science as a public beta on Claude Pro, Max, Team and Enterprise plans, with a research funding stream that offered up to 50 academic and nonprofit research projects USD $30,000 in Claude credits each and closed applications on 15 July. Claude Science covers literature searches, scientific database access, data analysis and scientific visualisation, manuscript drafting, research computing management, native display of 3D protein structures, genome browser tracks and chemical structures, and code reproducibility tracking with conversation history. The product ships with more than 60 scientific skills across genomics, proteomics, structural biology and cheminformatics, integrates with laboratory infrastructure and high performance computing clusters, and integrates with Nvidia's BioNeMo Agent Toolkit for structural biology and cheminformatics work. Anthropic named three reference customers: Manifold Bio using Claude Science to run target assessment for tissue targeting medicines, the Allen Institute running multi agent workflows that produce more than 100 page literature reviews the human team had needed up to two years to write, and the UCSF Brain Tumor Center running glioma genetic susceptibility research in one tenth the previous time. Anthropic product lead Scott White named the fragmentation problem the beta targets: "research tooling is brutally fragmented ... Claude Science pulls all of that into one place." EdTech Innovation Hub on Anthropic expanding its AI research tools with Claude Science beta, 1 July.

Why this matters: For the ANU School of Computing, Murdoch Children's Research Institute, Garvan Institute of Medical Research and Curtin University teams running the AUD $3 million Anthropic AI for Science grant Dario Amodei announced on the Prime Minister's Canberra visit in April, the operational read is that the toolchain the grant was going to underwrite has now shipped as a general availability product with a USD $30,000 credit line the researcher can apply for directly, and the question the next Claude for Science steering committee answers is whether the ANU precision medicine, Murdoch paediatric, Garvan clinical genomics and Curtin computing education workloads move onto the public beta this month or whether the existing grant credits keep the workflow on the older API surface through the end of the semester. For AARNet, Pawsey Supercomputing Research Centre, National Computational Infrastructure and the university research computing offices running the Nvidia BioNeMo, Slurm and Singularity stack the Claude Science beta integrates with, the read is that Anthropic has just put a governed AI orchestration surface on top of the same HPC login node estate each Australian tier one university has been standing up for two years, and the question the next high performance computing user community meeting answers is whether the research office deploys the Claude Science skill catalogue as a shared research computing service or whether the individual research group's own procurement carries the tool from the desk to the cluster. For the Australian ed-tech and research computing vendors building on the same research surface (the local BioNeMo integrators, the ARC and NHMRC grant management platforms, the reference management vendors selling into the Australian university market), the read is that Anthropic has now packaged literature search, database access, visualisation, manuscript drafting and research computing into one product, and the vendor whose 2027 roadmap does not have an integration answer to the Claude Science skill catalogue is the vendor whose next university renewal answers a research computing office that has already seen the Allen Institute two years to 100 pages comparison on the same slide.

Armenia signs OpenAI and Firebird to put 50,000 free ChatGPT Edu and Codex seats into every school and university

Emma Thompson at EdTech Innovation Hub reported on Wednesday 2 July that Armenia's Ministry of Education, Science, Culture and Sport has signed a partnership with OpenAI and Firebird to distribute 50,000 free ChatGPT Edu and Codex subscriptions across the country's education, engineering and research communities from the start of the 2026 to 2027 academic year, and that Firebird will finance the initial phase of the deployment. The subscriptions cover university lecturers, university students, secondary school teachers and senior secondary students on the general education side, and Codex sits alongside as a separate developer tooling product for the engineering and research users the ministry named as a priority. An OpenAI delegation led by Alina Leon visited Armenia from 23 to 26 June to meet the ministry, universities, schools, research organisations and technology industry bodies. Leon on the framing OpenAI is putting on the country deal: "we work with governments to support fundamental changes related to the introduction of AI in education systems", and on the visibility target: "we want to use this opportunity to present Armenia to the world and show what can be done in education through the use of AI." OpenAI has previously signed similar country deals with the education ministries of Estonia, Kazakhstan, Slovakia and Greece. EdTech Innovation Hub on Armenia preparing the rollout of 50,000 ChatGPT Edu and Codex subscriptions, 2 July.

Why this matters: For the federal Department of Education reading the OpenAI country deal against the Australian Framework for Generative AI in Schools rollout, the $70 million AI Accelerator the Treasurer put through the budget in May, and the state department AI vendor lists that name ChatGPT Edu, Corella, NSWEduChat and ClassmAIte on the same page, the operational read is that a country of three million people has just moved past the federal per state vendor comparison Australia is still running and into a single sponsored deployment that spans preschool to postdoc, and the question the next Education Ministers' Meeting answers is whether the Australian sector's AI access strategy stays a state by state procurement model or opens a federal panel arrangement that can price the same negotiation OpenAI just closed with Yerevan. For Universities Australia, the Innovative Research Universities group and the Group of Eight member vice chancellors reading the Codex piece of the deal against the ANU Anthropic partnership and the UNSW ChatGPT Edu contract, the read is that OpenAI has now packaged the coding surface alongside the education surface as a country level deployment, and the question the next joint AI in higher education paper answers is whether the sector's federated Copilot, ChatGPT Edu, Claude for Education and Codex procurements can now be pooled the way the smaller anglophone jurisdiction just did. For OpenAI's Australian sales team and the ed-tech vendors reselling ChatGPT Edu into Australian schools and universities, the read is that the OpenAI Education for Countries programme now has Estonia, Kazakhstan, Slovakia, Greece and Armenia as reference customers, and the vendor whose 2027 pitch to the federal Department of Education or the state education portfolios does not carry a whole of sector answer to the country deal reference set is the vendor whose next procurement conversation answers a buyer with the ministerial press release on the same tab.

Yesterday's brief carried Skills SA's multi agent VET compliance stack and the English Teach First survey; today's NSW audit sits against the same sector wide data governance arc, and the Armenia deal sits against the OpenAI for Australia programme the Foundry announcement was staged inside. More at digitalattitudes.com.au.