About Clark & Company

Craig Clark is a senior information governance and cyber security practitioner with over a decade of frontline experience in the education sector. He founded Clark & Company in 2016 after observing first-hand how generic, private-sector compliance frameworks were being applied to education institutions at significant cost and with limited effect.

Craig currently serves as Chief Information Security Officer at a London university, where he leads on cyber security strategy, risk management, and information governance at an institutional level. This active operational role means the advice Clark & Company provides is grounded in the realities facing education leaders today not theoretical best practice.

He chairs the IRMS Information Rights Group and holds CIPM certification.

Our Mission

To provide practical, actionable, and pragmatic advice and support that is tailored to fit the educational environment. We work with clients in full understanding that return on investment is critical which is why a core element of all engagements is to ensure that our clients develop the skills and understanding necessary to close gaps and manage information governance issues in house.

Clark & Company delivers its services through a team of specialist associates drawn from across the information governance, data protection, and cyber security professions. Each associate is selected for their education sector experience and their commitment to the same practical, proportionate approach that underpins everything the firm does. Craig leads strategic engagements and ensures consistency of quality and approach across all client relationships.

Our Focus Areas

We provide a range of services across the following areas

Data Protection

Helping institutions understand and comply with data protection laws and ensuring that the processing of personal data is fair, lawful and complies with the data protection principles.

Cybersecurity

Helping institutions understand their current cyber security posture and developing controls to reduce the risk and impact of cyber-attacks.

Strategic AI Services

Where institutions are seeking to understand the opportunities, risks and key work required to get the most out of emerging technologies including Generative AI , we offer advice and support to ensure that solutions are considered in a way that aligns with strategic objectives and governance requirements.

Who We Work With

We work across the public and private education sector and have clients at all levels of the education spectrum including nurseries, schools, colleges, and universities. We also work with education technology vendors, suppliers, and regulatory and advisory bodies.

Get in Touch

If you would like to discuss your needs and how we can help, please feel free to reach out on the contact details below:

Schedule a chat: calendly.com/ccinfogov/30min

Email: [email protected]

© 2025 Clark & Company Information Governance Services Ltd