InfoSec / Cyber

January Cyber update - How Can Schools Help Prevent Cyber Attacks?

January Cyber update - How Can Schools Help Prevent Cyber Attacks?

With the increase in Cyber crime against schools in the UK we are focusing in on what can be done to help prevent cyber crime in a way mangeable for school budgets.


Previously we reported on the rise in cyber attacks against schools in the UK in 2022:

How can schools help prevent cyber attacks?

  1.  Training and Awareness to build a defence - first and foremost, training of staff is the best way to prevent a cyber attack.  Making people aware and following best practices as a way to build a defence.  Provide training for staff through specific courses or posters for awareness:

Raise awareness of phishing as this is the easiest way for threat actors (hackers) to obtain login information:[tags]=

Set up Multifactor Authentication:

2. Best Practices that build security - have a good password policy that enforces complexity and general data governance controls, teach staff how to keep their passwords safe:

3. Technology Defences - move to the cloud where possible. Implement security solutions, specifically those securing access and identity through preventative controls. Ensure all devices are running the latest security patches. Backup, backup, backup - and practice a restore:

4. Know what to do when attacked - plan out response and recovery capability. Ensure that the right people and decision makers are well versed and organised from the outset.  Don't forget that you might need to report a Cyber Attack to your data protection officer and the ICO:

LGFL provide lots of free support and guidance for schools:

as do the NCSC:

Further reading about The Enduring Impact of Cyber Crime: