Technology plays a key role in schools, supporting teachers in delivering outstanding lessons. However, today more than ever, cost reductions and security are critical factors across the public sector. Sharp strives to help organisations across the board overcome challenges with high-quality, dependable, and secure technology, services, and associated consultancy.
Schools are falling behind in developing digitalisation strategies, lacking a clear vision of what they need to change or implement. Meanwhile, there is a concerning rise in cyber-attacks against schools, educational establishments are more likely to suffer a cyber security breach than the average business in the UK. In 2022, 70% of Secondary Schools and 88% of Further Education Colleges identified data breaches or cyber-attacks compared to 39% of UK Businesses. Cyber-attacks against schools can take many forms, the most common attack being a phishing email, but threats can also include malware and downloads from bogus websites, ransomware attacks, and Denial of Service attacks.
The NCSC (National Cyber Security Centre), states that “This is a growing threat, and we strongly encourage schools, colleges, and universities to act on our guidance and help ensure their students can continue their education uninterrupted.”
So, what regulations do you need to follow and how can you protect your school against cyber-attacks?
Getting the basics right
Under GDPR regulations, you are required to produce a record of data processing. This document is an expansive list of all the data you hold and highlights the cost if it got into the wrong hands. Templates for this document are easily accessible online, you can find a template here. Secondly, you need to create an information asset register, recording where all your data is, classifying it by risk, and documenting the controls in place to protect the data within it. Finally, you should create a data retention policy.
Education is key
One of the simplest and most effective ways to avoid a cyber-attack is to educate staff and pupils on how to prevent themselves from falling victim to threats. Your training should aim to cover:
- Information security principles
- Spotting phishing attacks
- GDPR
- Scenario planning: what if X happens
Protecting your data
The most effective way to protect your data is to use as many security tools as possible! There is a wide range of tools available, from both physical devices to security systems.
Physical devices such as business-grade firewalls prevent threat actors from getting into your network. You can protect laptops and desktops with endpoint security tools, such as Anti-Virus, Malware Protection, and Auto-Isolation. Finally, ensure that all devices are encrypted, protecting them if ever they should fall into the wrong hands.
Introducing security systems is an easy fix to protect yourself against cyber security threats. Apply Multi-Factor Authentication, Enable Single Sign On and introduce an Advanced Email filtering solution to help protect staff against Phishing attacks.
Cyber essentials scheme
Cyber Essentials is a simple and effective Government backed scheme that schools of all sizes can use to help protect themselves against most internet-based threats. The scheme is particularly useful for schools, highlighting how they can protect themselves, their employees, and their data, from unauthorised access and theft. While providing guidance and support tailored toward the Education sector.
At Sharp, we can guide you through the accreditation process by drawing upon our wealth of IT expertise. We recognise the cyber security threats faced by UK schools, we know how to ensure an IT operation is secure, and we understand the steps needed for you to become Cyber Essentials certified.
Outsourcing IT Services
Schools often lack the expertise or resource to keep on top of disruptive IT issues in-house - this is where outsourced IT support can help. By letting IT support companies take full control of your outsourced IT services, you and your team can concentrate on day-to-day tasks and business development. Sharp offers its own outsourced IT support service – Complete I.T. Manager, that does just that.
Sharp can work with you to understand your objectives and build a detailed IT roadmap, with built-in review meetings and strategic planning sessions. This will allow us to take the burden of IT support and management off your shoulders so that you can focus on teaching.
