The InfoSec website provides advice from the University of Oxford's Information Security team on keeping yourself and your data safe. See in particular the guidance on how to Secure your research information.
The website includes details of the University's Third Party Security Assessment: any third party services used to store or process non-public University data should go through this.