Cyber Security Schools Audit 2022

The full cyber security report is now available.

In May 2022, 805 schools from across the United Kingdom took part in the second nationwide audit of cybersecurity in schools. The audit was run in partnership between the National Cyber Security Centre (which is part of GCHQ) and London Grid for Learning (LGfL)

Despite an increase in the number of ransomware attacks, a new cyber security survey reveals that schools across the UK are better prepared for cyber attacks.

Key findings from the audit include:

• 100% of schools now use firewall protection
• 99% of schools use an antivirus solution
• 78% of schools said they had experienced at least one of the types of cyber security incident mentioned in the audit
• 74% of schools enable 2-step verification (2SV) for their most important accounts
• 56% of school leaders and governors felt more informed about the cyber security issues within their schools
• 53% of schools felt prepared for a cyber attack
• 49% of schools state they have appropriate documents in place
• 46% of schools were aware of the NCSC’s free cyber security training for school staff.

Both the NCSC and LGfL offer free resources to support schools in reinforcing their defences against cyber attack. These include training courses, the CyberFirst programme for secondaries and the CyberSprinters programme for primary schools

Why not check out NCSC's cyber security school hub, which includes the NCSC cybersecurity training course for school staff which was designed using the findings of the 2019 audit, the CyberFirst programme for secondary schools, and the CyberSprinters game for primary schools.

The LGfL offers free support to all schools in the country. This includes policy toolkits, School Security report tool and subject specific guidance and advice.

All links and resources can be found on the NCSC website