Cyber security for schools, colleges, academies and MATs

Schools, colleges, academies and MATs are under increasing pressure from the government and their stakeholders and  to ensure their cyber security is in good shape

The government has recently released guidance around internal scrutiny in academy trusts, which “aims to provide [MATs] with suggestions as to how they can implement internal scrutiny / audit arrangements that meet the requirements of the Academies Financial Handbook (AFH). It also aims to help them to better discharge their responsibilities for ensuring effective stewardship and oversight of their organisation, as well as an adequate governance and control environment, and to provide them with a medium for self-reflection.”

Why is cyber security important for schools, colleges, academies & MATs?

  • You're responsible for protecting the sensitive data of vulnerable young people. It’s vital that appropriate measures are in place to protect it
  • You're providing a critical service in teaching, guiding and safeguarding our young people. If for any reason you're unable to operate due to a cyber attack, the negative impact could be significant
  • Disruption to systems and networks can be expensive to fix (and potentially result in fines), stop you from being able to operate, compromise safeguarding and be damaging to your reputation

How likely is it that we’ll be hit with a cyber attack? 

The education sector was struck by more than 70 ransomware attacks during the pandemic alone and in March, the NCSC revealed that schools had lost financial records, students’ coursework and Covid-19 testing data during a spike in cyber attacks targeting the sector.

One in five schools and colleges have fallen victim to cyber crime, according to research from specialist insurer Ecclesiastical. 

The bottom line is that cyber criminals are opportunists. They look for easy targets, so any school, college, academy or MAT that has not got appropriate measures in place to protect its systems and data is in a dangerous position.

What should schools, colleges, academies and MATs be doing to protect themselves?

External review (cyber security audit)

Meet the requirements of the Academies Financial Handbook (AFH) and show stakeholders that you're aware of the importance of cyber security and are proactively addressing any weaknesses in your infrastructure with a third party assessment of your cyber resilience. 

Penetration testing

An attempt to safely exploit your applications and network to determine whether they’re vulnerable to attack. Protect your environment by mitigating critical threats, reduce the likelihood of a breach and prove that you take cyber security seriously.

Cyber Essentials & Cyber Essentials Plus 

These certifications are great first steps towards making your systems more secure. They are supported by the National Cyber Security Centre, recommended by the ICO and accredited through IASME.  The scheme is UK Government-backed and suitable for organisations of all sizes.

Staff cyber security awareness training

We’ve partnered with KnowBe4, leading suppliers of security awareness and training solutions to provide you with a proven, comprehensive approach that integrates baseline testing to build a more resilient and secure organisation. We'll manage the process for you for just £35 per user per annum

Questions or ready to learn more?

Quote "Education" for 5% discount*

About Securious

PCI QSA company for Devon, Cornwall and Somerset - Securious

We’re on a mission to make cyber security engaging, accessible and easy

Understand education

We understand education - and we get how cyber security fits into it... Or how it should (and can). Our team has a diverse background with unique and relevant experience, so our understanding goes above and beyond the technical.

No salespeople

We aren’t salespeople - nor do we employ them. Cyber security is ongoing, and so are our relationships with clients. That means we don’t push products or services that won’t help; we just give you information, advice and honesty.

Truly independent

We’re independent - in every way: independently owned, product-agnostic and happy to just get on with it. We’ll progress your cyber security with minimal disruption or involvement from you, as your trusted cyber security partner.

Client Feedback

It was really important for us to have a highly competent but local company to help us ensure we are PCI compliant and Securious have delivered above and beyond our expectations

Cardstream

We appreciate your support!  Securious has been fantastic to work with

Maistro

Many thanks for your help with this, you’ve held us by the hand with this process and we really appreciate it

Ecom6

Thank you so much for your great service and getting us compliant on time

Halco

The help and support given was excellent

Rotamic

It’s 10 out of 10 on all counts, the service has been excellent

Alan Paine

…thank you for the great session! I feel much more positive about the whole process now and less overwhelmed

Conote

I can only give 10’s across the board. Not just in this instance but I’ve worked with various people at Securious… and the quality of service, responsiveness and the support you give where required is always superb.

ProdigyIT

...massive thanks to the team at Securious for their diligence and patience at getting us over the line. It’s been a heck of a journey!

AB-UK

Questions or ready to learn more?

Quote "Education" for 5% discount*