Ofqual Highlights Cyber Security Risks in Schools and Colleges

Ofqual, the Office of Qualifications and Examinations Regulation in England, is highlighting the importance of cyber security in education. This follows a Teacher Tapp survey showing major weaknesses in how schools and colleges in England handle cyber security.

Key Findings

• 1 in 3 secondary teachers didn't receive cyber security training last year.

• 34% of schools and colleges had a cyber incident last year.

• 23% faced phishing attacks, the most common type of cyber incident.

• The north-west region was hit hardest, with 40% of schools reporting incidents.

• 20% of schools couldn't recover quickly from attacks, with 4% taking over half a term to recover.

• 9% of headteachers said the attacks were critically damaging.

Interestingly, the survey didn't mention financial losses, suggesting schools might not have been asked about it. Financial losses can be severe for schools and MATs.

Impact on Education

The survey showed some serious effects of cyber attacks, including:

• Loss of student and group coursework

• Disruption to teaching

• Limited access to IT resources

• Damage to school reputation and parent trust

Call to Action

Amanda Swann, Ofqual's Executive Director, urges schools to focus on cyber security. Training staff in cyber security helps meet DfE standards and is required by the Risk Protection Arrangement (RPA), which mandates the NCSC training. The GDPRiS platform offers an e-learning course to show staff have completed the training.

Several organisations provide resources, like the National Cyber Security Centre's school resource and Education Data Hub's Cyber Resilience resources, for practical tips on defending against cyber attacks.

Conclusion

The survey shows an urgent need for better cyber security in schools and MATs. It stresses the importance of regular training, strong incident response, security protocols, and proactive defence strategies to protect data and maintain school integrity.

The GDPRiS platform and related services help schools defend against cyber attacks, ensure staff training, and manage cyber security incidents. Let us help your school become a digital fortress - book a meeting with our team today!