Broadband and so much more:      Get connected with LGfL

Security Guidance & LGfL's 12 Layers of Protection

12 layers of cybersecurity protection

Do your senior leaders understand the protection you need...and receive from LGfL?

Free with LGfL - 12 Layers of Digital Defence

12 layers of cybersecurity protection

When it comes to school security, LGfL has a world-beating 12 layers of protection that you won't find together anywhere else (all part of the service, of course). There are many state-of-the-art security products to use in school, but our protection begins before the internet reaches you. Janet scrutinises and scrubs our internet to identify suspicious activity and stop DDoS attacks before it even reaches our state-of-the-art data centres. Combined with the next-generation firewalls in our data centres and your school, plus all the security tools we provide for your devices and servers (make sure you are using them all), and you end up with one of the most secure school networks in the world.

Cybersecurity Top Tips for Schools

Cybersecurity Top Tips for Schools poster

Click the image to download our top tips poster

Policy Toolkit for Schools

ELEVATE cybersecurity toolkit logo graphic

With regular headlines about schools falling victim to cybercrime, there is increasing pressure to ensure that governors and school leaders have appropriate controls in place to protect their school. With this in mind, LGfL developed the Elevate Cybersecurity Toolkit for Schools at elevate.lgfl.net

Elevate is a collection of key document templates that schools can use to take their security preparedness to the next level, including security policy, incident response plan and risk and asset registers. It can also be used as a foundation for schools that want to attain Cyber Essentials Certification.

Something Phishy?

Nonetheless, the greatest risks to a network are likely to come from a member of staff clicking something they shouldn't (find out more how phishing remains the greatest threat to schools and businesses in our school security report with NCSC). Cybercriminals particularly targeted worries about COVID-19 at the start of the pandemic. Make sure to use Sophos Phish for staff, and make parents aware of the risks, and that they can contact ActionFraud if they have been a victim. Why not follow @LGfLCyberCloud on Twitter to find out the latest updates.

ActionFraud poster

General Principles - CyberAware from NCSC

NCSC has boiled down cybersecurity awareness messages into the following 6 top tips for the general public. They are great to share with staff but especially parents and pupils (read here what they mean and why):

  1. Create a separate password for your email

  2. Create a strong password using three random words

  3. Save your passwords in your browser

  4. Turn on two-factor authentication

  5. Update your devices

  6. Turn on backup

NCSC CyberAware poster

Cyber Choices

CyberChoice graphic

Cyber Choices is a national programme led by the NCA (National Crime Agency) developed to assist in the fight against Cybercrime. Cyber Choices seek to intervene and educate people who may be vulnerable to becoming involved in cybercrime. The programme has four main aims:

  1. Explain the difference between legal and illegal cyber activity

  2. Encourage individuals to make informed choices in their use of technology

  3. Deter and/or divert individuals from cyber crime

  4. Promote legal and ethical cyber opportunities

National Cybersecurity support for schools

The National Cyber Security Centre (NCSC, part of GCHQ) has recently issued alerts to educational establishments about attacks against education establishments. NCSC outlines a number of steps you can take to keep cyber criminals out of your networks here. The organisation has also created a dedicated page for schools which you may wish to read. We recommend you make sure you use our security products and that they are up to date and on all your devices.

You may also wish to scroll through the screenshots of mail and SMS scams that NCSC and the US Dept of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) have warned about in this joint advisory document - useful to make colleagues aware of.

NEW: strategic cybersecurity training for senior leaders from NCSC

The National Cybersecurity Centre (NCSC, part of GCHQ) has produced free cyber security training to raise awareness and help school staff manage some of the key cyber threats facing schools.

This training is non-technical and appropriate for all staff to attend, but may be particularly helpful for senior leaders and governors to attend in order to understand high-level issues and why you need to be aware (and what you need to do about it). Sign up here.

NCSC cyber security training for school staff poster

Parents and Pupils

Remember there are new scams every day, so it isn't a question of memorising a list of Top 10 Scams. Instead, remind parents and pupils to check every link and not believe or click things that are too good to be true (or secret new information, cures or payouts!). Maybe share the poster above, too. As an example, the government launched a WhatsApp Coronavirus 'bot', which sounded like it could be a scam, but you could find it on official gov.uk pages as a useful new service.

Staff Protection

Education is key for staff, as well as for pupils. One great way to begin this process is to roll out Sophos Phish Threat - phishing simulation and training for staff. It isn't a question of catching them out, but helping them to spot the signs so the fraudsters do NOT catch them out.

Find out more and claim your licences at phish.lgfl.net.

Save more than you spend and keep children safe

© Copyright LGfL  >  Privacy Notice and Policies  >  Accessibility

Registered Address: ​9th Floor, 10 Exchange Square, Primrose Street, London, EC2A 2BR. London Grid for Learning Trust - a charity whose mission is the advancement of Education. A company limited by guarantee registered in England no 4205579 Reg charity no 1090412.