Schools & MATs

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 27. Passwords

Your password is your first, and often most critical, line of defence. Yet, far too many people still rely on easily guessable combinations like "123456" or "password," leaving their digital lives wide open to attack. Cybercriminals use sophisticated tools to crack weak passwords in seconds, and is one of the easiest forms of attack - low risk.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 26. Physical Security of Digital Assets

It's easy to overlook the importance of physical security when we rely so heavily on digital systems, but it's a critical component of overall cyber security. This means protecting your devices and data from unauthorised physical access. For individuals, it's locking your laptop when you step away, securing your home network equipment, and shredding sensitive documents. For organisations, it includes controlled access to offices and server rooms, securing hardware (laptops, USB drives), and m

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 25. Server Security: Protecting Your Digital Core

For most organisations, servers are the undisputed backbone of their IT infrastructure. They house critical applications, store vast amounts of sensitive data (customer information, intellectual property, financial records), and power essential services. Consequently, servers are prime targets for cyber attackers, making robust server security an absolute necessity, not an option. A compromise of even one critical server can bring an entire operation to its knees.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 23. Filtering and Monitoring

In cybersecurity, filtering and monitoring are proactive measures that act as your digital watchdogs, guarding against threats by controlling what comes in and out of your networks and systems, and by continuously observing activity for suspicious signs. These practices are essential for early threat detection and prevention.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 22. Hardware: Printers

Printers are often overlooked, however, they can represent significant security vulnerabilities if not properly secured.  Modern printers are essentially specialised computers with network connections, storage capabilities, and their own operating systems, making them potential targets for cybercriminals.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 21. Hardware: Asset Management

In any organisation, and even for individuals with multiple devices, simply knowing what hardware and software you own is the foundational step for effective cybersecurity. This practice is known as asset management, and it's far more than just an inventory list; it's a critical component of risk management and security posture. You cannot protect what you do not know you have, or what state it's in.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 20. Hardware: Safe disposal

When upgrading your tech or getting rid of old devices, simply deleting files or formatting a hard drive is often not enough to truly erase your data. Safe disposal of hardware is a critical, yet frequently overlooked, aspect of cybersecurity. If sensitive personal or organisational information remains recoverable on old devices, it can easily fall into the wrong hands, leading to identity theft, financial fraud, or severe data breaches.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 19. Anti-virus/anti-malware

Anti-virus and anti-malware are essential tools that are designed to detect, prevent, and remove malicious software – collectively known as malware – that can infect your devices, compromise your data, and disrupt your operations. Just like your body needs an immune system to fight off infections, your digital devices need protection against cyber threats.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 18. Regular Updates: Patching Against Threats

In the fast-evolving world of cybersecurity, software, operating systems, and applications are constantly being refined, improved, and, crucially, secured. Regular updates, also known as patching, are not merely about gaining new features or improving performance; they are an absolutely critical cybersecurity practice. Neglecting updates is like leaving your digital doors wide open after a burglar has already identified the weak spots.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 17. Access Control: Managing User Privileges

In cybersecurity, access control for users is about ensuring that only authorised individuals can access specific systems, applications, and data, and only to the extent necessary for their role. This principle is often referred to as the "principle of least privilege"  – granting users the bare minimum permissions required to perform their job functions, and nothing more.

Read more …

"A graphic announcing 'October is Cyber Security Awareness Month,' with text explaining the importance of creating a cyber emergency contact list in preparation for a cyber attack. It also includes a 'Cyber tip' to assess passwords, turn on MFA, and review critical accounts, especially email. A shield icon with a checkmark and a lightbulb icon are visible."

October 16. Access Control: Securing Your Digital Gateways (Wi-Fi & Networks)

Your Wi-Fi network and broader internal networks are the digital gateways to all your connected devices, resources and data. Just as a physical building needs secure entrances, your networks require robust access controls to prevent unauthorised entry and protect everything within. Ignoring network security is like leaving your front door wide open.

Read more …

  1. October 15. Access Control: Securing Your Home Office (Working From Home)
  2. October 14. Access Control : (Multi-factor authentication)
  3. We've teamed up on a podcast with the Small Business Cyber Security Guy
  4. October 13. Cyber Security Awareness
  5. October 12. Training: Empowering your human firewall
  6. October 11. Policies and Procedures: Cyber Blueprint
  7. October 10. Understanding Your Cyber Posture
  8. Time's Ticking: Windows 10 support ends in October 2025!
  9. October 9. A Guide for Education Providers
  10. October 8. How Can Your Organisation Prevent Ransomware Attacks?
  11. October 7: Under Attack: The Reality of Ransomware
  12. October 6: Cyber Action Plan and A Roadmap to Resilience
  13. October 5: Cyber Responsibilities - We're All in This Together
  14. October 4: When a Cyber Attack Hits
  15. October 3: Data Security, the Core of Protection
  16. October 2: Privacy Protection & Safeguarding Personal Data
  17. October 1: Welcome to Cyber Security Awareness Month!
  18. Nursery Cyber attack
  19. Fraud awareness from the DfE
  20. The Classroom's Dark Side: Cyber crime from the Classroom
  21. Data Breach: School sends out names and contact details in a spreadsheet.
  22. KCSIE 2025: Data Protection, AI, and Cyber Security
  23. The Online SCR Data Breach: What You Need to Know
  24. Back to School Basics for Data Protection and Cyber Security Compliance
  25. The Latest Cyber Threat: The "Murky Panda"
  26. Building a Secure School: Using the ICO Accountability Framework to Meet DfE Digital Standards
  27. Why Physical and Data Security Must Go Hand-In-Hand
  28. Digital Safeguarding: DfE announces statutory DfE Digital Standards
  29. The Data Protection Lead/Champion Role
  30. Changes to the Academy Trust Handbook 2025
  31. School closes for two days after cyber incident
  32. Social Media Day 2025
  33. How Ofsted looks at AI during inspection and regulation
  34. Data Breaches 2025 Report Highlights
  35. Not everyone needs access: The Key to Protecting Sensitive Data
  36. School cyber attack: Outwood Academy, Middlesbrough
  37. Alert: Schools receiving Microsoft File Sharing Phishing Emails
  38. School cyber attack: Framlingham College, Suffolk
  39. West Lothian Schools in Cyber Attack
  40. A Wake-Up Call for Cyber Vigilance - Danger in the Threat Landscape for Everyone
  41. New Governor Resources
  42. Are teachers using AI? 83% say its a time-saver
  43. DfE Digital Standards - narrowing the digital divide
  44. Arbor AI - On By Default
  45. DfE Guidance: Choosing a new MIS
  46. Short Guide to AI Video
  47. Safer Internet Day, Cyber Security & Data Protection
  48. The Cyber Resilience Championship
  49. The Multiple Dimensions of Supplier Due Diligence
  50. School shares sensitive pupil information as part of an FOI response
  51. Blacon High School Cyber Attack
  52. WhatsApp and FOI's: ICO Warnings
  53. New AI Guidance from the DfE
  54. What the proposed Government legislative proposal around cyber crime means
  55. DfE update to record keeping and management
  56. Update to data sharing for school immunisation programmes
  57. SLT Digital Lead Profile
  58. The role of governors in cyber security and data protection
  59. Navigating Privacy at the End of Term , Special Occasions and End of Year
  60. South East Technological University has experienced a cyber incident
  61. Safeguarding Identity in Microsoft 365: Protecting the UK Education Sector Against Cyber Threats
  62. Cyber Attack on a Special School
  63. Stealing children's data
  64. Ofqual highlights the value of cyber security training in schools
  65. Fylde Coast Academy Trust Cyber Attack This Week
  66. Calling all IT leads in schools and mult academy trusts!
  67. Ransomware cyber attack on a school in Bromley
  68. School hit by Cyber Attack
  69. DfE Digital Standards for Schools and Colleges Tracker
  70. Schools and Trusts Best Practice Area
  71. ESFA Cyber Essentials Requirement for Colleges from 2024/2025
  72. ICO Reprimands a School
  73. Out of date technology
  74. Data Retention and the Pupil File
  75. Have you assigned your SLT Digital Lead yet?
  76. What's a Cyber Incident and what should we do?
  77. Getting Started with AI (Artificial Intelligence)
  78. Cyber attack on a school during half term
  79. The rise of cyber attacks in schools are causing pupils to miss classes
  80. Cyber attack on a Trust; the aftermath
  81. School Focus: The Vale Federation | Aylesbury
  82. DfE Dealing with Subject Access Requests (SARs) Guidance
  83. Update to the Guidance on Information Sharing from the DfE
  84. Product Focus on Checklists : Initial Trust Plan
  85. Product Focus on Checklists : End of Term Checklist
  86. Product Focus on Checklists : Social Media
  87. Product Focus on Checklists : Lettings
  88. Milk Island: The secret location that allows children to view restricted content on Google Maps
  89. Free Cyber help, advice and training with the Cyber Resilience Centres
  90. The Perils of Paper: The Printing Vulnerability
  91. Product Focus on Checklists : Governors and Data
  92. Product Focus on Checklists : Site Moves
  93. Cyber attack on a University
  94. Product Focus on Checklists : Bring your own device
  95. Product Focus on Checklists : Working out of school/offsite
  96. Cyber Attack on a School
  97. Major cyber-criminal gang Lockbit brought down by UK Law Enforcement
  98. Product Focus on Checklists : Photos and video
  99. Safer Internet Day 2024
  100. Kent Councils Data Breach
  101. Free cyber training for staff
  102. DfE Digital Standards Update
  103. ClassCharts Possible Data Breach
  104. School Focus: St Bernadette's Catholic Primary School | Brighton
  105. Guardians of Privacy: 16. Social Media Checklist
  106. Guardians of Privacy: 15. Navigating Social Media in Educational Settings Summary
  107. Guardians of Privacy: 14. Social Media and Cyber Bullying
  108. Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
  109. Guardians of Privacy: 12. Social Media and Going Viral
  110. Guardians of Privacy: 11. Staff Social Media Accounts
  111. Guardians of Privacy: 10. Social Media and Cookies
  112. Guardians of Privacy: 9. Social Media and Morality
  113. New Resources for Schools from the ICO
  114. Guardians of Privacy: 8. Social Media Policies
  115. Guardians of Privacy: 7. Social Media Data Retention
  116. Guardians of Privacy: 6. Posting Safely
  117. Guardians of Privacy: 5. Social Media and Consent
  118. Guardians of Privacy: 4. Social Media Access Control
  119. Guardians of Privacy: 3. Social Media Channels
  120. Guardians of Privacy: 2. Law and Regulations
  121. Phishing attacks targeting schools - alert from City of London Police
  122. The ICO reprimands a Multi Academy Trust
  123. Guidance for the use of school email and applying email retention in schools
  124. Data Protection Tips for Early Years Settings
  125. Trust Initial Plan Checklist Update
  126. Update on Advisory for Rhysida Ransomware
  127. Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
  128. Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
  129. Lettings Best Practice and Guidance
  130. The UK Online Safety Bill becomes an Act (Law)
  131. Considerations when migrating to a new MIS
  132. The importance of software updates (PaperCut vulnerability and Rhysida ransomware)
  133. Public bodies and sensitive data
  134. ICO: 10 Step guide to sharing information to safeguard children
  135. Email and Security: ICO recent guidance
  136. Social Media Policy
  137. Data Protection and Cyber Security (Inset Day) Training Ideas
  138. Changes to Microsoft Free Licensing for Schools
  139. What to do in the event of a Cyber Attack
  140. How KCSIE is linked to Cyber Strategy
  141. VICE SOCIETY - Ransomware attacks on schools
  142. Using Tags if you are a group of organisations in the DPE Knowledge Bank
  143. Cyber Insurance in the Public Sector
  144. Cyber Attack: Leytonstone School
  145. The ICO Reprimands a school
  146. Cyber Attack: Dorchester School
  147. Knowledge Bank Role Types: Admin, Staff and Trustee
  148. Cyber Attack: Wiltshire School
  149. Types of Cyber Attacks: The Insider Threat
  150. Why your data is profitable to cyber criminals
  151. Striking Data Breach
  152. January Cyber update - How Can Schools Help Prevent Cyber Attacks?
  153. FOI: Vaccination Justifications
  154. The Education sector now at highest risk of cyber attacks
  155. Schools Blocked from Using Facial Recognition Systems
  156. The Children's Code
  157. Cyber Attacks
  158. Protocol for Setting Up and Delivery of Online Teaching and Learning
  159. Class Dojo International Data Sharing
  160. Secure file transfer of files using Royal Mail
  161. Emergency contacts and consent
  162. Best Practice for Managing Photos and Video
  163. Headteacher fined for breach of data protection legislation

Search