Cyber Security Training for School Staff
Practical cyber security training for everyone in school
Cyber security is no longer just an issue for the IT department.
Schools rely on technology for almost every part of the working day — registers, safeguarding information, pupil records, email, finance, payroll, online payments, parent communications and teaching resources.
A single mistake can quickly become a whole-school problem: a convincing phishing email, an unexpected MFA request, a reused password, a malicious attachment, sensitive information sent to the wrong person, or confidential data uploaded into an unapproved online or AI service.
Our Cyber Security for School Staff training has been developed specifically for schools, with practical examples and straightforward guidance that staff can apply immediately.
The aim is not to turn staff into cyber-security specialists. It is to help everyone make safer decisions during an ordinary school day.
Two Training Options:
Cyber Security for School Staff
Full Course — approximately 2½ hours
Our comprehensive Cyber Security for School Staff course gives staff a practical understanding of the main cyber risks facing schools and the everyday actions they can take to reduce them.
The course covers:
-
Cyber security in schools and why schools are targeted
-
Passwords, password managers, Single Sign-On and passkeys
-
Multi-Factor Authentication (MFA)
-
Phishing, scams and social engineering
-
Fake login pages, suspicious links, QR codes and attachments
-
Payment fraud and supplier bank-detail changes
-
Malware and ransomware
-
Backups and business continuity
-
Sending and sharing school information safely
-
Cloud storage and sharing permissions
-
Apps, online services and “Shadow IT”
-
AI, deepfakes and voice cloning
-
Safe use of AI with school information
-
Data breaches and incident reporting
-
Practical cyber-security habits for everyday school life
The course uses realistic school-based examples throughout, including threats aimed at teachers, finance staff, reception, HR and senior leaders.
Cyber Security for School Staff
45-Minute INSET Edition
For schools looking for a shorter whole-staff session, we have also created a condensed 45-minute Cyber Security INSET briefing.
This version is ideal for:
-
INSET days
-
Staff meetings
-
Whole-school briefings
-
Annual cyber-security refreshers
It retains the key practical messages from the full course while concentrating on the things every member of staff should know.
The briefing covers seven key areas:
-
Cyber Security in Schools — why this matters to everyone
-
Passwords & MFA — practical account security
-
Phishing & Scams — pause, check and verify
-
Malware & Ransomware — recognise and respond
-
Handling School Information — send, share and store safely
-
AI & Deepfakes — use AI safely and recognise new risks
-
Good Habits & Reporting — what staff should take back to work
Why Should All School Staff Receive Cyber Security Training?
Cyber attacks often target people rather than technology.
A school may have strong firewalls, email filtering and security software, but those controls can still be undermined if someone:
-
gives away a password
-
approves an unexpected MFA request
-
opens a malicious attachment
-
responds to a fraudulent payment request
-
sends information to the wrong recipient
-
installs unapproved software
-
uploads school information into an inappropriate online service
Cyber security is therefore a shared responsibility.
The training reflects the Department for Education's cyber-security expectations, including the principle that staff should receive regular cyber-security awareness training.
Practical, School-Based Training
This is not a highly technical IT course.
The training is built around situations staff may genuinely encounter during a school day, for example:
-
A Microsoft 365 document-sharing email that asks you to sign in
-
A supplier emailing to say their bank details have changed
-
An unexpected authentication request appearing on your phone
-
A member of staff downloading a “free” PDF converter
-
Pupil information being sent to the wrong parent
-
A school laptop being lost or stolen
-
An AI tool being used with confidential school information
-
A voice message that sounds exactly like the headteacher asking for an urgent payment
The emphasis throughout is on simple, memorable actions staff can take.
The course also looks at how Artificial Intelligence is changing cyber security. Staff learn about:
-
AI-generated phishing emails
-
convincing fake invoices and messages
-
voice cloning
-
deepfake images and video
-
risks associated with uploading school information into AI tools
-
why removing a name does not always make information anonymous
-
the importance of checking AI-generated information
The message is not that schools should avoid AI. It is: Use AI — but know what you're giving it and check what you're getting back.
Who Is the Training For?
The training is suitable for all school staff, including:
Teachers • Teaching Assistants • Office Staff • Finance Staff • Business Managers • Senior Leaders • HR Staff • Site Staff • Pastoral Teams • Governors and Trustees
No technical knowledge is required.
Course Format
Both courses are completed online.
Staff can work through the training at a time that suits them and receive a certificate on completion.
Schools can choose either:
Full Cyber Security Course
Approximately 2½ hours
or
Cyber Security INSET Edition
Approximately 45 minutes
or
BOTH - for different staff.
The shorter version is particularly suitable where schools want to provide whole-staff annual awareness training within an INSET day or staff meeting.
Pricing
Either Cyber Security course can be purchased individually for
£99 per school with access for any number of staff, or BOTH for £150.
Included FREE with our Unlimited Training Subscription - Both Cyber Security courses are included in our Unlimited Training Subscription, £299 per school, per year, all staff have access to more than 50 school-focused CPD courses. Click here for details.
“I thoroughly enjoyed the course and thought that it was very well presented and delivered.” DW, Spalding High School, Lincs
