Two recent cyber security warnings highlight why schools must review IT supplier oversight, access controls and data protection responsibilities.

A recent reported cyber incident affecting Department for Education systems highlights the growing risk of highly convincing phishing attacks targeting schools. This article explains what may be at risk, why professional contact details matter, and the seven essential checks every school should complete immediately to strengthen cyber resilience and protect staff, pupils and finances.

New data protection rules are changing what schools need to do before September 2026. Discover the five key actions every Headteacher, School Business Manager and Trust should take to remain compliant with UK GDPR and the latest ICO and DfE guidance.