Education

Schools are a favourite target. Be a hard one.

fromIT helps schools, academy trusts, colleges and nurseries meet the DfE cyber security standards, keep their Risk Protection Arrangement cover, and protect some of the most sensitive data there is.

  • Cyber Essentials certified
  • ISO 27001 practitioner
  • Fixed, published prices
Questions on your desk this year
“Do you meet the cyber security standards?”DfE
“Are your backups kept offline?”RPA
“Have staff completed cyber training?”RPA
“How do you protect pupil data?”ICO
“Who do we call if it goes wrong?”You

fromIT helps you answer every one of these, with evidence.

Where attacks land

Four ways criminals target schools and colleges.

Busy staff, lots of devices and very sensitive data. Criminals see schools as quick wins.

  1. Ransomware

    Attackers lock systems and threaten to publish data, often timed for exam season or the start of term.

  2. Phishing staff

    Shared mailboxes, parents emailing all day and staff short on time make schools easy to trick.

  3. Supplier fraud

    Fake invoices and changed bank details from "suppliers", aimed at the finance office and the business manager.

  4. Pupil data exposed

    Safeguarding notes, SEN records and medical information. Some of the most sensitive personal data there is.

What's expected of you

Who asks, what they want, and how fromIT helps.

Schools have more written expectations than most. Here is who sets them, and how fromIT helps you meet them.

WhoWhat they expectHow fromIT helps
DfEThe digital and technology standards include cyber security standards for schools and colleges, covering devices, accounts, backups and training.A gap review against the standards, then Cyber Essentials as clear evidence of the technical basics.
RPACyber cover under the Risk Protection Arrangement depends on offline backups, NCSC training for staff, registering with Police CyberAlarm and having a response plan.Help checking every condition is met, and a response plan that works on the day.
ICOAppropriate security for personal data under UK GDPR, and a report within 72 hours of a breach that puts people at risk.Controls that protect pupil records, and incident response that helps you decide what to report, and when.
Academy trustsTrusts need permission from the DfE before paying any cyber ransom.Calm incident response that contains an attack and helps you report it, usually starting remotely within the hour.

Ransomware doesn't wait for the holidays. Neither should your response plan.

FAQ

School and college questions

What does the RPA need for cyber cover?

Under the Risk Protection Arrangement, cyber cover depends on four things: offline backups, NCSC cyber security training for staff with access to your IT, registering with Police CyberAlarm, and having a cyber response plan. Check the current RPA membership rules for the detail, and fromIT can help you meet each one.

Does Lessons from IT count as the NCSC training?

No. The RPA asks for the NCSC's own training. Lessons from IT is a free extra that covers the scams staff see every day, and it works well alongside the NCSC course.

Can you help a trust with several schools?

Yes. fromIT can review the trust centrally, then work school by school, with one plan and one set of policies across the trust.

Can fromIT work with our existing IT provider?

Yes. fromIT focuses purely on security and works alongside whoever looks after your IT today. If you don't have an IT provider, fromIT recommends Adkinsio for everyday IT support.

How much does it cost?

Cyber Essentials starts at £595 as a fixed-price package, plus the IASME assessment fee. Monthly services start from £2 per person. Cyber incident response starts with a fixed £795 first response. Every price is on the site.

Protect your pupils' data.
And your school's name.

Book a 30 minute call. fromIT will look at where your school stands today and give you a clear, fixed-price plan. No obligation, no sales script.