LeadersSafeguardingCPDGovernorHubKeyGPT
Training Hub

How to protect your school from cyber attacks

Understand the steps your school can take to make its IT systems and processes safer and more robust. Download our technical specifications checklist to find out if your school is meeting the DfE's recommended cyber security standards. Also get to grips with what you need to do if a cyber attack is happening right now.

Last reviewed on 11 June 2026See updates
School types: All•School phases: All•Ref: 43020
Contents
  1. Understand your school's requirements
  2. Follow these steps to assess the risk
  3. Include cyber incidents in your business continuity plans
  4. Make your school community ‘cyber aware’
  5. Put protection in place
  6. Control access to user accounts
  7. Only use licensed technology
  8. Back up your data
  9. Report cyber attacks
  10. Download our technical requirements checklist
  11. If you're experiencing a possible cyber attack right now

Understand your school's requirements

Preventing and responding to cyber threats is an important part of protecting your school and the large amounts of sensitive personal data it holds.

Your school is responsible for making sure it has the appropriate level of security protection and procedures in place – this is explained in paragraph 144 of Keeping Children Safe in Education (KCSIE).

Aim to meet the DfE's cyber security standards

This article is a summary of the DfE’s cyber security standards for schools and colleges. It's non-statutory guidance, but meeting the standards will help you feel confident that your school is prepared for a cyber incident.

You can find more support with cyber security via the