I’m currently sat on a train heading to the Bett Show in London, where Education Secretary Bridget Phillipson recently outlined ambitious plans to modernise education through technology. As long-time advocates of EdTech, we’re excited about the potential for new funding to bring these plans to life.
From a cyber security perspective, we’re equally hopeful that increased budgets will support the essential improvements schools need to protect their systems, staff, and students.
The UK education sector is taking steps to address cyber security risks, but new research from ESET reveals significant areas for improvement. With 73% of educational institutions having experienced at least one cyber-attack in the past five years, and 20% reporting three or more incidents, the stakes are high.
While many schools are working to close cyber security gaps, many challenges remain. Government data from 2024 shows that 71% of secondary schools, 86% of further education colleges, and 97% of higher education institutions faced cyber-attacks in the past year. This is far higher than the 50% of UK businesses affected in the same period.
One of the most concerning findings is that 7% of education institutions operate without any annual cyber security budget. A third still lack basic defences, such as antivirus software (33%) or strong password policies (35%). More advanced measures, such as Managed Detection and Response (MDR), have been adopted by only 21% of institutions, leaving a significant gap in their ability to detect and respond to threats.
Balancing awareness with action
Despite these challenges, progress is being made. Most education organisations (76%) rate their staff’s awareness of cyber security best practices as excellent or good. Over half plan to expand staff training and upgrade their cyber security tools in the next 12 months.
Phishing remains a top concern, with 43% of schools or colleges listing it as their primary threat. These attacks often target sensitive data stored by schools, such as financial details and personal information. Strengthening defences against phishing is critical to protecting students, staff and operations.
Jake Moore, Global Cyber Security Advisor at ESET, emphasises the importance of an integrated approach:
“Institutions can better safeguard their operations, staff, and students by increasing investment, educating stakeholders, implementing advanced solutions, enhancing training, and collaborating with specialised providers.”
How Black Swan can help
At Black Swan Cyber Security Solutions, we understand the unique challenges faced by the education sector. Our tailored services are designed to strengthen cyber security without overwhelming your budget. Here’s how we can help:
Advanced threat protection
Protect your institution with Managed Detection and Response (MDR) to detect and stop threats before they escalate.Staff awareness and training
We offer tailored security awareness training, including phishing simulations, to empower your team with the knowledge to recognise and respond to threats.Strong foundations
Ensure compliance with DfE standards and fill gaps in essential measures, like antivirus software and strong password policies.Data backup and recovery
With ransomware attacks like the one that affected Blacon High School, secure backup solutions are vital. Our cloud backup services provide peace of mind and rapid recovery options.Risk assessments and consultancy
Gain a clear picture of your current vulnerabilities and receive expert guidance on addressing them effectively.
Education is too important to be disrupted by cyber crime. By partnering with Black Swan, schools can safeguard their operations and create a secure environment for staff and students to thrive.
Let’s work together to protect the future of education. Contact us today to discuss how we can support your school or academy.
