{"id":16170,"date":"2024-04-12T12:06:33","date_gmt":"2024-04-12T11:06:33","guid":{"rendered":"https:\/\/education-today.co.uk\/?p=16170"},"modified":"2024-05-13T11:34:43","modified_gmt":"2024-05-13T10:34:43","slug":"is-your-school-cyber-safe","status":"publish","type":"post","link":"https:\/\/education-today.co.uk\/is-your-school-cyber-safe\/","title":{"rendered":"Is your school Cyber safe?"},"content":{"rendered":"

\"\"The sustained integration of technology into the classroom over the past two decades has undoubtedly changed the art of teaching. Yet, technological innovation has also created new vulnerabilities which can be exploited by criminals, who see schools as profitable targets.<\/p>\n

\"\"From cybercriminals posing as suppliers, to other cyber-threats such as phishing links, designed to obtain data through defrauding someone into disclosure; and ransomware, which aims to extort money via a ransom following the acquisition and encryption of data or files \u2013 cyber attacks can have far-reaching consequences for pupils\u2019 education, teachers\u2019 resources, and learning systems.<\/p>\n

Weak passwords, poorly designed software, authorising too many people to access files and accidental human error are all contenders for a data breach\/cyber attack.<\/p>\n

Schools are more likely to identify cyber security breaches than the average business<\/strong><\/p>\n

In their latest report, the Department for Science, Innovation & Technology stated that all types of education institutions are more likely to identify cyber security breaches or attacks than the average business.* In the last 12 months, 63% of secondary schools and 41% of primary schools identified cyber breaches or attacks.<\/p>\n

\"\"<\/p>\n

Phishing attacks are by far the most common type of breach or attack identified, followed by online impersonation, then viruses, spyware, or malware.<\/p>\n

Many of these issues can be avoided through staff training and investing in robust data management processes.<\/p>\n

 <\/p>\n

What to do if a data breach occurs<\/strong><\/p>\n

If a serious data breach occurs which is likely to harm the rights and freedoms of individuals, it must be reported to the Information Commissioner\u2019s Office (ICO) within 72 hours. The ICO will then provide advice and guidance on how to manage the breach, and lessons to be learned so it doesn\u2019t happen again. This may cover what improvements to policy documents, security measures, and training the school needs to put in place.<\/p>\n

How can cyber insurance protect schools?<\/strong><\/p>\n

\"\"What options are available to schools if they do suffer a serious security breach, even if all policies have been closely followed? One option which can provide a viable safety net against emerging cybercrime and security threats is cyber insurance.<\/p>\n

Not only does a cyber insurance typically cover loss of income related to a cyber attack, but it can also cover the cost of third-party experts should they be required, such as a forensic investigator or ransom negotiator, and the cost of full data re-creation.<\/p>\n

Should a cyber attack happen, having insurance in place could be the difference between a breach being well-managed, and resolved, or a difficult process ensuing. Cyber security insurance can also be supported by an online reputational risk management policy which can include the use of \u2018social listening\u2019 technology to monitor your school\u2019s digital footprint and alert stakeholders to any imminent online reputational risks.<\/p>\n

Is your school fully protected?<\/strong><\/p>\n

\"\"Whether you\u2019re covered by a commercial insurance policy or the Risk Protection Arrangement, it\u2019s worth checking to see if your current cyber cover is as extensive as it could be. Here are a few questions to ask:<\/p>\n