Student and Staff Data
Safeguarding notes, special educational needs records and staff files are among the most sensitive data any organisation holds. Leaks can cause lasting harm to children and families.
Schools, Colleges And Universities
Keep learning going, whatever happens.
Schools, colleges and universities run open, busy networks for thousands of changing users, often with a small IT team. Attackers know that disruption during term time puts leaders under real pressure.
TOP THREATS: EDUCATIONSector focus
Student and Staff DataSafeguarding notes, special educational needs records and staff files are among the most sensitive data any organisation holds.
RansomwareAttacks timed around exams or the start of term create maximum pressure.
Open Networks and Personal DevicesStudents, staff, visitors and contractors connect personal devices to the same networks every day.
Online Learning PlatformsLearning platforms, cloud storage and communication tools hold coursework and messages.
The threat picture
Why attackers target education
Education providers hold safeguarding records, exam data, research and the personal details of children and young people. Ransomware that closes a school or locks a university out of its systems affects families and communities, not just the institution.
We help education providers focus limited budgets on the controls that matter most, meet the Department for Education's cyber standards, test learning platforms and networks, and build the resilience to keep teaching going.
Ransomware
Attacks timed around exams or the start of term create maximum pressure. Many providers discover too late that their backups were reachable and encrypted too.
Open Networks and Personal Devices
Students, staff, visitors and contractors connect personal devices to the same networks every day. Without careful segmentation, one infected laptop can reach systems it should never see.
Online Learning Platforms
Learning platforms, cloud storage and communication tools hold coursework and messages. Weak account security and poor configuration expose both.
Research Data
Universities hold valuable research, some of it sensitive or commercially important. State backed groups and criminals actively target it.
Regulation and standards
The rules you work under
The obligations that shape security in education, and how we help you meet them with evidence rather than paperwork.
DfE Cyber Security Standards
The Department for Education sets cyber security standards for schools and colleges in England, covering risk assessment, awareness training, device protection, access control, updates, backups and reporting attacks.
Official guidanceRisk Protection Arrangement Cyber Cover
Schools in the RPA must keep offline backups, register with Police CyberAlarm, have a cyber response plan and ensure staff and governors complete NCSC cyber security training to be covered.
Official guidanceUK GDPR and the ICO
Education providers must protect personal data, including children's data, and report qualifying breaches to the ICO within 72 hours of becoming aware of them.
Official guidanceIllustrative scenario
Ransomware Before Results Day
How a typical attack on education unfolds, step by step. Press play to watch it run.
- 1Way in
A member of staff opens a convincing invoice email and their account is taken over.
- 2Spread
The attacker uses a shared admin password to reach the management information system and file servers.
- 3The threat
Days before results are released, ransomware is staged alongside a copy of student records.
- 4Where it breaks
Endpoint protection blocks the payload, monitoring flags the unusual admin activity, and offline backups mean nothing needs to be paid for.
Where Cybergen breaks the chain
Awareness training, unique admin accounts, endpoint protection and tested offline backups are exactly what the DfE standards and RPA conditions ask for, and they are what keep a school open.
Illustrative example, not a real incident.
How we help
Security that fits how you operate
Sector insights
Latest thinking for education
Why Educational Institutions Are Prime Targets for Cyberattacks
Universities and schools are targeted by cyber attacks for their data, open networks and limited budgets. Learn the main threats and a 12 month roadmap.
Read article · 11 min
The Role of Cyber security in the Educational Sector
Cyber security in education protects schools, colleges and universities from rising attacks. Learn why the sector is targeted and how to build resilience.
Read article · 7 min
Cyber security in Online Learning Platforms: Keeping Students Safe
Online learning platform security keeps students, educators and their data safe. Learn the e-learning security challenges and best practices for institutions.
Read article · 10 minOther sectors
Explore more sectors
What are the DfE cyber security standards?
They are standards for schools and colleges in England covering risk assessment, awareness training, device protection, account control, updates, backups and reporting attacks. Providers are expected to work towards meeting them.
What do schools need for RPA cyber cover?
Offline backups, registration with Police CyberAlarm, a cyber response plan and NCSC cyber security training for staff and governors with access to IT systems.
Why are schools and universities targeted?
They hold sensitive personal data, run open networks for large user populations and often have limited security resources, which makes them attractive and easier to disrupt.
Can you help a small school with a limited budget?
Yes. We focus on the controls that reduce the most risk first, many of which are low cost, and help you build from there.
Get in touch
Talk to us about education
Tell us about your organisation, the regulations you work under and what is worrying you most.
Prefer to talk? Call +44 (0) 1865 950 828
Or email [email protected]
Thanks, we've received your enquiry
A member of our team will be in touch to talk through your sector and requirements.