An update this week from the ESFA has reported a change in requirements regarding IT security for colleges and special post-16 institutions (SPIs).

Colleges and SPIs will now be required to achieve cyber essentials during the 2024 to 2025 funding year. The requirement to obtain an annual IT health check will be removed.     

ASME, the National Cyber Security Centre’s (NCSC) cyber essentials delivery partner, has created useful guidance documents for schools which also apply to colleges.  

You can also: 

• use IASME’s free Cyber Essentials Readiness tool to get tailored advice  

• work with an NCSC-assured Cyber Advisor or a Cyber Essentials Certification Body near you 

The DfE can provide further help and guidance with this: DfE Help Centre

The NCSC have recently reported that 92% fewer insurance claims are made by organisations with Cyber Essentials controls in place.

   Knowledge Bank Support & Guidance
We have DfE Digital Standards for Schools and Colleges checklists as part of our platform to help you to work towards digital compliance.  Contact us on This email address is being protected from spambots. You need JavaScript enabled to view it. for more information.

Consider starting by going through our Information and Cyber Security Best Practice Checklist and looking at the help, guidance and policy templates in our Information & Cyber Security Best Practice Area.


Image created using Canva