Schools & MATs

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 26. Physical Security of Digital Assets

It's easy to overlook the importance of physical security when we rely so heavily on digital systems, but it's a critical component of overall cyber security. This means protecting your devices and data from unauthorised physical access. For individuals, it's locking your laptop when you step away, securing your home network equipment, and shredding sensitive documents. For organisations, it includes controlled access to offices and server rooms, securing hardware (laptops, USB drives), and m

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 25. Server Security: Protecting Your Digital Core

For most organisations, servers are the undisputed backbone of their IT infrastructure. They house critical applications, store vast amounts of sensitive data (customer information, intellectual property, financial records), and power essential services. Consequently, servers are prime targets for cyber attackers, making robust server security an absolute necessity, not an option. A compromise of even one critical server can bring an entire operation to its knees.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 23. Filtering and Monitoring

In cybersecurity, filtering and monitoring are proactive measures that act as your digital watchdogs, guarding against threats by controlling what comes in and out of your networks and systems, and by continuously observing activity for suspicious signs. These practices are essential for early threat detection and prevention.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 22. Hardware: Printers

Printers are often overlooked, however, they can represent significant security vulnerabilities if not properly secured.  Modern printers are essentially specialised computers with network connections, storage capabilities, and their own operating systems, making them potential targets for cybercriminals.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 21. Hardware: Asset Management

In any organisation, and even for individuals with multiple devices, simply knowing what hardware and software you own is the foundational step for effective cybersecurity. This practice is known as asset management, and it's far more than just an inventory list; it's a critical component of risk management and security posture. You cannot protect what you do not know you have, or what state it's in.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 20. Hardware: Safe disposal

When upgrading your tech or getting rid of old devices, simply deleting files or formatting a hard drive is often not enough to truly erase your data. Safe disposal of hardware is a critical, yet frequently overlooked, aspect of cybersecurity. If sensitive personal or organisational information remains recoverable on old devices, it can easily fall into the wrong hands, leading to identity theft, financial fraud, or severe data breaches.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 19. Anti-virus/anti-malware

Anti-virus and anti-malware are essential tools that are designed to detect, prevent, and remove malicious software – collectively known as malware – that can infect your devices, compromise your data, and disrupt your operations. Just like your body needs an immune system to fight off infections, your digital devices need protection against cyber threats.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 18. Regular Updates: Patching Against Threats

In the fast-evolving world of cybersecurity, software, operating systems, and applications are constantly being refined, improved, and, crucially, secured. Regular updates, also known as patching, are not merely about gaining new features or improving performance; they are an absolutely critical cybersecurity practice. Neglecting updates is like leaving your digital doors wide open after a burglar has already identified the weak spots.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 17. Access Control: Managing User Privileges

In cybersecurity, access control for users is about ensuring that only authorised individuals can access specific systems, applications, and data, and only to the extent necessary for their role. This principle is often referred to as the "principle of least privilege"  – granting users the bare minimum permissions required to perform their job functions, and nothing more.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 16. Access Control: Securing Your Digital Gateways (Wi-Fi & Networks)

Your Wi-Fi network and broader internal networks are the digital gateways to all your connected devices, resources and data. Just as a physical building needs secure entrances, your networks require robust access controls to prevent unauthorised entry and protect everything within. Ignoring network security is like leaving your front door wide open.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 15. Access Control: Securing Your Home Office (Working From Home)

The shift to remote work has transformed how we work, but also introduces new cyber security challenges, particarly around access control in a less structured environment, like a home office.  When working off site,  your personal network and devices become potential entry points into your organisation's systems, making robust access control crucial.

Read more …

  1. October 14. Access Control : (Multi-factor authentication)
  2. We've teamed up on a podcast with the Small Business Cyber Security Guy
  3. October 13. Cyber Security Awareness
  4. October 12. Training: Empowering your human firewall
  5. October 11. Policies and Procedures: Cyber Blueprint
  6. October 10. Understanding Your Cyber Posture
  7. Time's Ticking: Windows 10 support ends in October 2025!
  8. October 9. A Guide for Education Providers
  9. October 8. How Can Your Organisation Prevent Ransomware Attacks?
  10. October 7: Under Attack: The Reality of Ransomware
  11. October 6: Cyber Action Plan and A Roadmap to Resilience
  12. October 5: Cyber Responsibilities - We're All in This Together
  13. October 4: When a Cyber Attack Hits
  14. October 3: Data Security, the Core of Protection
  15. October 2: Privacy Protection & Safeguarding Personal Data
  16. October 1: Welcome to Cyber Security Awareness Month!
  17. Nursery Cyber attack
  18. Fraud awareness from the DfE
  19. The Classroom's Dark Side: Cyber crime from the Classroom
  20. Data Breach: School sends out names and contact details in a spreadsheet.
  21. KCSIE 2025: Data Protection, AI, and Cyber Security
  22. The Online SCR Data Breach: What You Need to Know
  23. Back to School Basics for Data Protection and Cyber Security Compliance
  24. The Latest Cyber Threat: The "Murky Panda"
  25. Building a Secure School: Using the ICO Accountability Framework to Meet DfE Digital Standards
  26. Why Physical and Data Security Must Go Hand-In-Hand
  27. Digital Safeguarding: DfE announces statutory DfE Digital Standards
  28. The Data Protection Lead/Champion Role
  29. Changes to the Academy Trust Handbook 2025
  30. School closes for two days after cyber incident
  31. Social Media Day 2025
  32. How Ofsted looks at AI during inspection and regulation
  33. Data Breaches 2025 Report Highlights
  34. Not everyone needs access: The Key to Protecting Sensitive Data
  35. School cyber attack: Outwood Academy, Middlesbrough
  36. Alert: Schools receiving Microsoft File Sharing Phishing Emails
  37. School cyber attack: Framlingham College, Suffolk
  38. West Lothian Schools in Cyber Attack
  39. A Wake-Up Call for Cyber Vigilance - Danger in the Threat Landscape for Everyone
  40. New Governor Resources
  41. Are teachers using AI? 83% say its a time-saver
  42. DfE Digital Standards - narrowing the digital divide
  43. Arbor AI - On By Default
  44. DfE Guidance: Choosing a new MIS
  45. Short Guide to AI Video
  46. Safer Internet Day, Cyber Security & Data Protection
  47. The Cyber Resilience Championship
  48. The Multiple Dimensions of Supplier Due Diligence
  49. School shares sensitive pupil information as part of an FOI response
  50. Blacon High School Cyber Attack
  51. WhatsApp and FOI's: ICO Warnings
  52. New AI Guidance from the DfE
  53. What the proposed Government legislative proposal around cyber crime means
  54. DfE update to record keeping and management
  55. Update to data sharing for school immunisation programmes
  56. SLT Digital Lead Profile
  57. The role of governors in cyber security and data protection
  58. Navigating Privacy at the End of Term , Special Occasions and End of Year
  59. South East Technological University has experienced a cyber incident
  60. Safeguarding Identity in Microsoft 365: Protecting the UK Education Sector Against Cyber Threats
  61. Cyber Attack on a Special School
  62. Stealing children's data
  63. Ofqual highlights the value of cyber security training in schools
  64. Fylde Coast Academy Trust Cyber Attack This Week
  65. Calling all IT leads in schools and mult academy trusts!
  66. Ransomware cyber attack on a school in Bromley
  67. School hit by Cyber Attack
  68. DfE Digital Standards for Schools and Colleges Tracker
  69. Schools and Trusts Best Practice Area
  70. ESFA Cyber Essentials Requirement for Colleges from 2024/2025
  71. ICO Reprimands a School
  72. Out of date technology
  73. Data Retention and the Pupil File
  74. Have you assigned your SLT Digital Lead yet?
  75. What's a Cyber Incident and what should we do?
  76. Getting Started with AI (Artificial Intelligence)
  77. Cyber attack on a school during half term
  78. The rise of cyber attacks in schools are causing pupils to miss classes
  79. Cyber attack on a Trust; the aftermath
  80. School Focus: The Vale Federation | Aylesbury
  81. DfE Dealing with Subject Access Requests (SARs) Guidance
  82. Update to the Guidance on Information Sharing from the DfE
  83. Product Focus on Checklists : Initial Trust Plan
  84. Product Focus on Checklists : End of Term Checklist
  85. Product Focus on Checklists : Social Media
  86. Product Focus on Checklists : Lettings
  87. Milk Island: The secret location that allows children to view restricted content on Google Maps
  88. Free Cyber help, advice and training with the Cyber Resilience Centres
  89. The Perils of Paper: The Printing Vulnerability
  90. Product Focus on Checklists : Governors and Data
  91. Product Focus on Checklists : Site Moves
  92. Cyber attack on a University
  93. Product Focus on Checklists : Bring your own device
  94. Product Focus on Checklists : Working out of school/offsite
  95. Cyber Attack on a School
  96. Major cyber-criminal gang Lockbit brought down by UK Law Enforcement
  97. Product Focus on Checklists : Photos and video
  98. Safer Internet Day 2024
  99. Kent Councils Data Breach
  100. Free cyber training for staff
  101. DfE Digital Standards Update
  102. ClassCharts Possible Data Breach
  103. School Focus: St Bernadette's Catholic Primary School | Brighton
  104. Guardians of Privacy: 16. Social Media Checklist
  105. Guardians of Privacy: 15. Navigating Social Media in Educational Settings Summary
  106. Guardians of Privacy: 14. Social Media and Cyber Bullying
  107. Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
  108. Guardians of Privacy: 12. Social Media and Going Viral
  109. Guardians of Privacy: 11. Staff Social Media Accounts
  110. Guardians of Privacy: 10. Social Media and Cookies
  111. Guardians of Privacy: 9. Social Media and Morality
  112. New Resources for Schools from the ICO
  113. Guardians of Privacy: 8. Social Media Policies
  114. Guardians of Privacy: 7. Social Media Data Retention
  115. Guardians of Privacy: 6. Posting Safely
  116. Guardians of Privacy: 5. Social Media and Consent
  117. Guardians of Privacy: 4. Social Media Access Control
  118. Guardians of Privacy: 3. Social Media Channels
  119. Guardians of Privacy: 2. Law and Regulations
  120. Phishing attacks targeting schools - alert from City of London Police
  121. The ICO reprimands a Multi Academy Trust
  122. Guidance for the use of school email and applying email retention in schools
  123. Data Protection Tips for Early Years Settings
  124. Trust Initial Plan Checklist Update
  125. Update on Advisory for Rhysida Ransomware
  126. Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
  127. Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
  128. Lettings Best Practice and Guidance
  129. The UK Online Safety Bill becomes an Act (Law)
  130. Considerations when migrating to a new MIS
  131. The importance of software updates (PaperCut vulnerability and Rhysida ransomware)
  132. Public bodies and sensitive data
  133. ICO: 10 Step guide to sharing information to safeguard children
  134. Email and Security: ICO recent guidance
  135. Social Media Policy
  136. Data Protection and Cyber Security (Inset Day) Training Ideas
  137. Changes to Microsoft Free Licensing for Schools
  138. What to do in the event of a Cyber Attack
  139. How KCSIE is linked to Cyber Strategy
  140. VICE SOCIETY - Ransomware attacks on schools
  141. Using Tags if you are a group of organisations in the DPE Knowledge Bank
  142. Cyber Insurance in the Public Sector
  143. Cyber Attack: Leytonstone School
  144. The ICO Reprimands a school
  145. Cyber Attack: Dorchester School
  146. Knowledge Bank Role Types: Admin, Staff and Trustee
  147. Cyber Attack: Wiltshire School
  148. Types of Cyber Attacks: The Insider Threat
  149. Why your data is profitable to cyber criminals
  150. Striking Data Breach
  151. January Cyber update - How Can Schools Help Prevent Cyber Attacks?
  152. FOI: Vaccination Justifications
  153. The Education sector now at highest risk of cyber attacks
  154. Schools Blocked from Using Facial Recognition Systems
  155. The Children's Code
  156. Cyber Attacks
  157. Protocol for Setting Up and Delivery of Online Teaching and Learning
  158. Class Dojo International Data Sharing
  159. Secure file transfer of files using Royal Mail
  160. Emergency contacts and consent
  161. Best Practice for Managing Photos and Video
  162. Headteacher fined for breach of data protection legislation

Search