The UK’s National Cyber Security Centre (NCSC) is rolling out a free cyber defense service for all schools, aiming to boost resilience in a sector that faces significant online risks. This move builds on the successful launch of the Protective Domain Name Service (PDNS) in 2023, and now includes multi-academy trusts, independent schools, and various internet service providers.
Working alongside Accenture and Cloudflare, PDNS blocks access to a constantly updating list of malicious websites, shielding users from threats like malware and ransomware. Sarah Lyons, NCSC’s deputy director for economy and society, emphasizes the importance of protecting educational environments from online dangers. She encourages schools to take advantage of this free service to enhance their cyber defenses.
Stephen Morgan from the Department for Education highlights the ongoing effort to protect schools, colleges, and nurseries from such threats. He stresses that the partnership with the NCSC ensures that all educational settings can bolster their cyber resilience at no cost.
Schools and universities are particularly vulnerable targets for cyber criminals, as noted in a recent Microsoft Cyber Signals report. These institutions possess a wealth of data and have a broad attack surface, including staff, administration, and various operational services. With diverse activities, different IT systems, and users as young as four, schools present a highly dynamic target for attackers.
In the UK, a study by Ofqual revealed that 34% of schools and colleges in England faced a cyber attack within the past year, often starting with phishing schemes aimed at staff or students. Many institutions struggled to recover quickly, with some taking weeks or months to get back to normal. Alarmingly, 9% of headteachers reported critical damage from these attacks.
Ofqual also found that a third of teachers hadn’t received any cyber security training in the last year, and among those who did, only two-thirds found it useful. Amanda Swann from Ofqual raises a critical point about the impact of weak cyber security, especially regarding the potential loss of students’ hard work.
The NCSC’s PDNS service is part of a broader initiative to provide schools with advice, guidance, and tools to improve their cyber security. Schools interested in PDNS should contact their DNS provider to get started via MyNCSC.