01 / 03
Attacks disrupt teaching
Ransomware can take MIS, safeguarding records, email and coursework offline. Tested backups and a recovery plan decide how quickly teaching and admin get back to normal.
Keep learning going and protect pupil data
For multi-academy trusts, independent schools, colleges and universities of 50 to 5,000 people. Clear findings for CISOs, security teams, finance and the board, and independent specialists for the DfE cyber security standards, RPA cyber conditions, Cyber Essentials and ransomware recovery.
Business Cyber Check introduces you to authorised insurers and brokers. We are not an insurer or broker and do not provide quotes or advice. Your enquiry may be shared with up to 3 of them.
What keeps education leaders up at night
02 / 03
Pupil and student data
You hold sensitive data about children, students, families and staff. A breach can mean reporting to the ICO, notifying families and lasting damage to trust.
03 / 03
Standards, conditions and scrutiny
DfE expects schools and colleges to work towards its cyber security standards by 2030, and RPA cyber cover comes with conditions. Boards and auditors want evidence.
How we help
01 / 03
Vetted security providers
Specialists who can close gaps, prepare you for assessments and run incident response.
02 / 03
Authorised insurers and brokers
Explore cyber cover with authorised specialists. We don't give quotes or advice ourselves.
03 / 03
Breach lawyers
Legal support on reporting duties, notices and regulators after an incident.
Standards and frameworks we can help you work towards
We don't certify, accredit or assess. We connect you with independent specialists who can help you work towards these.
01 / 06
DfE cyber security standards
Help meeting the DfE standards for schools and colleges, from annual risk assessments and MFA to backups and reporting attacks.
02 / 06
RPA cyber conditions
Help meeting the conditions of RPA cyber cover, such as offline backups, staff training and a response plan, if you're a member.
03 / 06
Academy Trust Handbook
Help showing your board and auditors proportionate cyber controls and incident plans, as the handbook expects of trusts.
04 / 06
Cyber Essentials and Cyber Essentials Plus
Help getting ready for assessment, which DfE says is a requirement for colleges under their funding agreement.
05 / 06
UK GDPR and pupil data
Help with data mapping, DPIAs and breach-response planning, with legal specialists where needed.
06 / 06
Ransomware recovery
Help building and testing backup and recovery plans, so getting back online doesn't depend on paying a ransom.
How it works
- 01
Book a 20-minute briefing
Tell us about your setup, deadlines and main concerns.
- 02
Get a clear picture
Understand what to prioritise for your security team, board, auditors and insurers.
- 03
Meet the right specialists
We introduce security providers, authorised insurers or brokers, or breach lawyers. You decide whether to go ahead.
Questions
Do schools have to meet the DfE cyber security standards?
They are DfE's recommended approach rather than law, but all schools and colleges should be working towards the core digital and technology standards, including cyber security, by 2030. Some elements, such as a cyber response plan, are conditions of RPA cover, and trusts must follow the Academy Trust Handbook. Specialists we introduce can help you see where you stand.
Does the RPA cover cyber attacks, or do we need cyber insurance?
The RPA includes cyber cover for members who meet its conditions, within set limits, so check your membership rules first. If you aren't a member, or want to explore insurance, we can introduce you to up to 3 authorised insurers or brokers. We don't quote or give advice, including on the RPA.
Is the briefing free for schools and trusts?
Yes. The 20-minute briefing is free for schools, trusts, colleges and universities, with no obligation to go ahead with anyone we introduce. We are paid by the specialists, insurers or brokers we introduce, not by you, and we only share your details with those you agree to hear from.
Can an academy trust pay a ransomware demand?
No. The Academy Trust Handbook says trusts must not pay cyber ransom demands, and DfE supports the National Crime Agency's advice not to pay. That makes offline backups and a practised recovery plan essential. Specialists we introduce can help you build and test them, and respond if you're attacked.
What should a school do after a cyber attack?
Follow your cyber response plan and contact your IT support straight away. DfE guidance says you may need to report the attack to the RPA or your insurer, Report Fraud and the DfE sector cyber team, and in some cases the NCSC and the ICO. Our Been hacked? page sets out the first steps.
Education
Talk it through in 20 minutes
A free, no-obligation briefing with clear next steps.