How to protect a school from cyber attacks

Cyber security should be a top priority for schools. Find out how and when to check if your systems and processes are good enough, and follow our links to free tools, training and support.

Last reviewed on 30 May 2022
See updates
School types: All · School phases: All
Ref: 43020
Contents
  1. Make cyber security a priority
  2. Get support from your LA or trust
  3. Get training for your staff
  4. Check what precautions you have in place
  5. Develop, review and test an incident response plan with your IT department
  6. Organise an annual audit
  7. Free resources on cyber security 

Our thanks to the following experts for their help with this article: Karen Mitchell; Vickie Cieplak and Edward Trimbee from the West Midlands Regional Cyber Crime Unit; and our internal IT experts at The Key and ScholarPack.

We also refer to the National Cyber Security Centre (NCSC) and its resources throughout this article.

Make cyber security a priority

Cyber security is becoming more important than ever, with many schools falling victim to cyber attacks, particularly ransomware attacks.

This article will show you where you can get started with protecting your school.

You’re responsible for making sure you have the appropriate level of security protection and procedures in place – this is explained in paragraph 143 of Keeping Children Safe in Education (2022) School data is incredibly sensitive – if it's compromised, this can be a risk to the pupils in your care Everything in your school relies on your computer network. An attack could mean you: Can’t contact your