Education providers are prime targets for cyber attacks due to the sensitive personal data they hold, with often limited IT resources to protect it.

Education providers often manage vast amounts of sensitive personal data for both staff and students alongside complex networks, diverse user groups and frequently limited budgets and resources.  This combination makes them an attractive target for cyber criminals, particularly for ransomware and theft.

A comprehensive cybersecurity strategy for educational institutions must address these specific vulnerabilities:

1. Robust Data Protection for Sensitive Information:

   • Student Data: Implement strict access controls and encryption for all student records, academic performance, and sensitive personal information.  Ensure that personal data is kept in the system that was designed for it rather than in email.

   • Staff Data: Secure HR, payroll, and personal staff data with the highest level of protection, you should consider using MFA.

   • Compliance: Ensure adherence to relevant data protection regulations.

2. Comprehensive Cybersecurity Awareness Training for All:

   • Ongoing Training: Regular, engaging training for all staff (teachers, administrators, IT, support staff) on recognizing phishing, safe Browse, data handling policies, and incident reporting.

   • Student Education: Integrate age-appropriate digital citizenship and online safety lessons into the curriculum.
     
     Review the DfE Digital Standards regarding training for both staff and students - the requirement is for annual cyber training.  We would advise continual awareness throughout the organisation with the use of posters: Harry the Hacker

3. Strong Access Controls and Multi-Factor Authentication (MFA):

   • Universal MFA: Enforce MFA for all user accounts (students, staff, administrators) accessing school systems, especially email and critical applications.  Be wary of granting remote access or access from a non-organisation device.

   • Principle of Least Privilege: Grant users only the minimum access necessary for their roles.

4. Regular System Updates and Patch Management:

   • Timely Patching: Establish a rigorous schedule for applying security patches and updates to all operating systems, software, and network devices. Unsupported software is a major risk.

5. Secure Backup and Disaster Recovery Strategy:

   • Offsite & Offline Backups: Implement a 3-2-1 backup strategy, ensuring critical data is backed up frequently, stored on diverse media, and with at least one copy isolated offline to protect against ransomware.

   • Tested Recovery Plans: Regularly test data recovery procedures to ensure systems can be restored quickly and reliably.

6. Network Segmentation and Device Management:

   • Isolate Networks: Segment the network to separate student, staff, and administrative networks. Isolate critical systems to limit lateral movement of threats.

   • Device Security: Secure all devices (laptops, desktops, tablets) used within the school environment with antivirus, firewalls, and strong configurations. Implement policies for personal devices (BYOD).

7. Incident Response Plan (IRP):

   • Preparedness: Develop a detailed IRP specifically tailored to the education environment, outlining roles, responsibilities, and steps for detecting, containing, eradicating, and recovering from cyber incidents.

   • Practice: Conduct regular tabletop exercises to test the plan's effectiveness.

By prioritizing these areas, education providers can significantly enhance their cybersecurity posture, protect their community, and ensure that the vital mission of learning can continue uninterrupted.

Government white paper :

• Common Attacks,
• Cyber crime: what education providers can do
• Cyber security: checklist for providers
• Ten cyber security tests for the wider business

Source of information: Cyber crime and cyber security: a guide for education providers

Review the ANME (Association of Network Managers in Education) Blog: Cyber Attacks on Schools - Why they are increasing and what we can do.  This is part of a series of articles designed to raise awareness of the importance of cyber security in schools.  

💡Today's Cyber Tip: The DfE Digital Standards

The DfE Digital Standards are a set of guidelines designed to help schools and colleges make informed decisions about technology, improve digital infrastructure and enhance cyber security.  These standards cover a range of areas including broadband, network security, cloud solutions, physical devices, filtering and monitoring, and leadership and governance, aiming to ensure educational institutions are safe, secure, cost-effective, and provide optimal learning opportunities for students in an increasingly digital world.

Choose your SLT Digital Lead today!

DPE Knowledge Bank Guidance and Support:

For schools and colleges, six of the DfE Digital Standards are now mandatory. We have a DfE Digital Standards Tracker tool help you track your cyber resilience and your progress: 

   

Review our Cyber Security Best Practice Area for micro learning, support, guidance and policies:

Cyber Security Best Practice Area

Why not have a look at our 'specialist' trainer Harry the Hacker :