LGfL has a sophisticated framework of protective measures to ensure the security of information and the availability of systems and services, including:

• Ensuring that our public infrastructure complies with the relevant technical standards for enabling access to central government systems;

• Implementing ISO27001 (our principal technology partners are ISO27001 already compliant);

• Employing a “defence in depth” approach to our systems, with multiple lines of defence including firewalls, anti-virus and ransomware protection;

• Incorporating alerting and monitoring systems that raise alarms and, where appropriate, drive proactive action;

• Providing a range of products and services, such as filtering and malware protection, at no additional cost to schools;

• Accessing the Internet via the Joint Academic Network (JANET). JANET is a very secure way of Accessing the internet which includes a range of protection measures including DDoS protection;

• Regularly request independent security checks that help us to ensure that our security systems are up to date;

• Vulnerability Assessment testing of new services that are brought on line to minimise the risk of hacking; and

• Ensuring the reliability and integrity of our staff who work with schools by conducting enhanced DBS checks, reminding staff of their and our obligations, and providing adequate training on the use, care, protection and handing of personal data.

In addition:

We are continuing to build our Centre of Excellence for Cyber Security that is a service included in the schools broadband service and offers schools a range of new products and services that will provide further assistance to schools as part of the broadband package, including the Elevate Toolkit, Malwarebytes and Meraki Systems Manager.