Title: UK Schools Show Improvement in Cyber Incident Recovery Amid Persistent Cybersecurity Gaps
Recent government data reveals that UK schools are progressing in their recovery from cyber incidents, even as significant cybersecurity shortcomings persist across the educational sector. The Office of Qualifications and Examinations Regulation (Ofqual) released these noteworthy statistics on October 1, strategically aligned with the observance of Cyber Security Awareness Month.
In a positive trend, the data indicates a consistent decline in the percentage of schools reporting cyber incidents. The figures dropped from 34% in the academic year 2023-24 to 29% for 2024-25, and further down to 27% projected for 2025-26. This reduction signifies a growing awareness and adaptability among educational institutions to safeguard against digital threats.
Moreover, when incidents do occur, a significant improvement has been observed in recovery times. Two-thirds, or 66%, of schools are now capable of immediate recovery, a notable increase from 55% in the previous academic year. The impact of these cyber threats appears to be less severe, as critical damage from attacks has decreased to just 7%, showcasing a sector that is gradually becoming better equipped to handle disruptions.
Amanda Swann, the executive director of delivery at Ofqual, emphasized the importance of these advancements, stating, “It’s encouraging to see schools recovering faster, but a cyber breach can still cause real uncertainty for students if coursework or marks are lost, and staff confidence can be affected long after systems are back online.” She pointed out that cybersecurity transcends technical issues, highlighting it as a leadership responsibility. Regular data backups, along with a robust response plan, can significantly mitigate the impact of cyber incidents, Swann noted.
Despite these advancements, the data indicates that a considerable number of schools still view cybersecurity primarily as a challenge for their IT departments. When questioned about the responsibility for cybersecurity, nearly half of the teachers (46%) identified their IT teams as the primary guardians of cybersecurity. In contrast, only 40% recognized that the responsibility should be shared among all staff, while a mere 9% acknowledged the involvement of senior leadership in the matter.
This lack of comprehensive engagement might elucidate why many schools continue to fall short in prioritizing cyber initiatives. While over half (55%) of the secondary schools surveyed reported taking steps to fortify themselves against cyber risks, a noteworthy percentage remains without fundamental protective measures. Many institutions have yet to implement essential protocols such as a formal cybersecurity policy, comprehensive risk assessments, and backup and recovery plans.
Mat Pullen, director of education at Jamf and a seasoned former secondary school teacher and university lecturer, expressed optimism over the sector’s improving cyber resilience. He remarked, “Reducing incidents matters, but so does recovering faster.” Highlighting the historical impact of cyber-attacks, Pullen noted how these incidents have once caused school closures lasting a week or longer, further complicating the educational landscape already disrupted by the pandemic. Such disruptions not only impact students but reverberate through families as parents often need to take time off work.
However, Pullen raised valid concerns regarding the 45% of schools that have yet to adopt preventive measures. He stressed the urgency for schools to conduct risk assessments, explaining, “Only by understanding what types of threats affect the items in their networks can they properly address the problem.” He proposed that schools should construct comprehensive internet safety frameworks, which might include content filtering systems to block harmful material and preventive software designed to thwart potential cyberattacks.
In Pullen’s view, cybersecurity should remain a collaborative responsibility shared among IT staff, educators, and senior leadership. He argued that dismantling these operational silos is crucial for ensuring robust security measures, ultimately preserving the seamless delivery of educational services.
The Ofqual study encompassed 2,162 schools and surveyed 3,775 teachers, providing a substantial overview of current cybersecurity practices within the UK educational system. As schools continue to evolve in their approach to cybersecurity, the findings reveal both progress and areas that require immediate attention, underscoring the need for a collective effort to enhance resilience against the looming threats in the digital age. This ongoing journey emphasizes that while recovery capabilities are improving, the foundation of preventive measures must be solidified to ensure the safety and security of the educational environment as a whole.