October 30. Cyber Support
Understanding where to get help for cyber resilience and in the event of a cyber attack is crucial for both individuals and organisations. The good news is that there is help and guidance available!
General Cyber Resilience and Attack Support in the UK
For any individual, business, or charity in the UK looking for cyber resilience advice or needing help after an attack, the primary source of trusted, government-backed information is the National Cyber Security Centre (NCSC).
-
National Cyber Security Centre (NCSC): As part of GCHQ, the NCSC is the UK's technical authority on cybersecurity. Their website (ncsc.gov.uk) provides free, high-quality advice and guidance for:
-
Individuals and Families: Practical tips on staying safe online, managing passwords, spotting scams, and securing home devices.
-
Small, Medium, and Large Organisations: Comprehensive guides on topics like ransomware prevention, incident management, securing devices, and implementing frameworks like Cyber Essentials.
-
Public Sector Organisations: Tailored guidance for government bodies and critical national infrastructure.
-
Reporting Incidents: The NCSC provides guidance on how to report a cyber incident, including suspicious messages or websites.
-
-
Action Fraud: This is the UK's national reporting centre for fraud and cyber crime. If you or your organisation have been a victim of a cyber attack or fraud, you should report it to Action Fraud (actionfraud.police.uk).
-
For Individuals: You can report online or call their helpline (0300 123 2040, Mon-Fri 8am-8pm).
-
For Businesses, Charities, or Other Organisations: If you are experiencing a live cyber attack (in progress), call 0300 123 2040 immediately (available 24/7).
-
Data Breaches: If the incident involves a personal data breach, you may also need to report it to the Information Commissioner's Office (ICO) within 72 hours under GDPR. If you have an independent DPO, then contact them for advice. Data Protection Education's customers can email
This email address is being protected from spambots. You need JavaScript enabled to view it. to get legal advice about when to contact the ICO in this situation.
-
-
Cyber Resilience Centres (CRCs): Across England and Wales, there are regional, police-led, not-for-profit Cyber Resilience Centres. These CRCs are designed specifically to help small and medium-sized enterprises (SMEs) improve their cyber resilience. They offer:
-
Free core membership with welcome packs, monthly tips, and access to resources.
-
Affordable cyber security services, often delivered by vetted university students under expert supervision, including security awareness training and vulnerability assessments.
-
Support in achieving government-backed certifications like Cyber Essentials.
-
You can find your local CRC by visiting the National Cyber Resilience Centre Group website (nationalcrcgroup.co.uk/regional-centres).
-
-
The Cyber Helpline: This is a free, confidential helpline that provides support to individuals and small businesses who have been victims of cybercrime. They offer advice on recovery, securing accounts, and emotional support. (thecyberhelpline.com)
Specific Support for Schools and Colleges in the UK
Given their unique vulnerabilities and the sensitive data they hold, schools and colleges have additional layers of support and specific guidance.
-
Department for Education (DfE) Digital Standards: The DfE provides a set of Digital Standards for schools and colleges, offering guidance on technology decisions, digital infrastructure, and cybersecurity. Adhering to these standards helps institutions build resilience and is often a key part of their cyber strategy. Contact us for further information about our DfE Digital Standards Tracking tools, we can provide support, guidance and progress tracking which can make up part of your Data Protection Compliance Report.
-
SWGfL CyberSecure Check for Schools: This is a free, innovative self-assessment tool developed in collaboration with the DfE and cybersecurity experts. It provides a framework for schools to self-assess their current cyber and information security policies and practices, identifying areas for improvement and offering action plans 👉 CyberSecure Check for Schools
-
NCSC Guidance for Education: The NCSC offers specific guidance tailored for higher education and further education institutions, as well as general advice for schools, addressing their particular threats and operational contexts. This includes resources on managing risk, incident reporting, and securing critical educational infrastructure. NCSC Guidance for Schools.
-
Education Sector-Specific Providers: Several private companies and non-profit organisations specialise in providing cybersecurity and data protection services directly to the education sector. These often offer tailored solutions, training, and 24/7 support for schools and colleges. For example, some organisations like Data Protection Education provide resources and trackers to help schools assess their compliance with DfE Digital Standards and manage their cyber strategy.
-
ANME (Association of Network Managers in Education): While primarily for network managers, their blog and resources often cover cybersecurity challenges and solutions relevant to the education sector, providing valuable insights from a technical perspective.
Building cyber resilience and knowing where to turn in an attack is a collective effort. By leveraging these resources, individuals and organisations across the UK can significantly strengthen their defences and contribute to a safer digital environment.
Working on your Cyber Incident Response Plan, means you will have a list of contacts when you have a cyber attack.
💡Today's Cyber Tip: Create a "Cyber Emergency Contact" List!
Today, make a list of key contacts you'd call in a cyber emergency: your bank's fraud department, credit card company, IT support (for work), and if needed, local police non-emergency or national cybercrime reporting agencies like Action Fraud (UK). Keep it somewhere safe and easily accessible.
Review DPE's previous articles:
{article title="Help after a Cyber Attack/Incident"}[link][title][/link]
[readmore]{/article}
{article title="How Schools are Dealing with Cyber Security Breaches"}[link][title][/link]
[readmore]{/article}
{article title="October is Cyber Security Awareness Month: 6. Cyber Action Plan"}[link][title][/link]
[readmore]{/article}
{article title="What to do in the event of a Cyber Attack"}[link][title][/link]
[readmore]{/article}
{article title="Be Cyber Aware: Cyber attacks and transparency. A no blame culture"}[title]
[text]
[readmore]{/article}
DPE Knowledge Bank Guidance and Support:
For schools and colleges, six of the DfE Digital Standards are now mandatory. We have a DfE Digital Standards Tracker tool help you track your cyber resilience and your progress: 
Review our Cyber Security Best Practice Area for micro learning, support, guidance and policies:
Why not have a look at our 'specialist' trainer Harry the Hacker :