Schools Enhance Cyber Security Measures with Improved Recovery Times

Recent findings indicate that schools and colleges in England are increasingly adept at recovering from cyber security incidents, although there remain significant gaps in their preparedness for such attacks. Ofqual, the exams regulator, encourages educational institutions to enhance their cyber security measures, ensuring that staff are well-informed on response protocols in the event of an incident. This initiative coincides with Cyber Security Awareness Month and follows the results of Ofqual’s latest annual survey, which assessed practices for the academic year 2025 to 2026.

Improved Recovery Rates from Cyber Incidents

The data reveals a decline in the proportion of schools experiencing cyber incidents, with the figure dropping to 27% in the 2025 to 2026 academic year, compared to 29% the previous year and 34% in 2023 to 2024. Furthermore, when such incidents do occur, schools are demonstrating an improved capacity for recovery, with 66% reporting immediate recovery, a notable increase from the 55% recorded in the prior year. The prevalence of critical damage due to attacks has also decreased, now standing at just 7%.

Amanda Swann, Ofqual’s Executive Director of Delivery, commented on these developments, stating, “It’s encouraging to see schools recovering faster, but a cyber breach can still cause real uncertainty for students if coursework or marks are lost, and staff confidence can be affected long after systems are back online.”

Teachers have shared various experiences regarding cyber security at their schools. One educator highlighted the effectiveness of their IT team’s ability to identify and mitigate ongoing attacks, while another praised the impact of staff training on raising awareness and preventing potential harm. However, not all schools have been as fortunate; one teacher recounted a complete loss of network and email access, and another described a situation that necessitated police intervention, resulting in heightened anxiety among staff and students.

Responsibility for Cyber Security

This year’s survey introduced a new question regarding accountability for cyber security within schools. The results showed that 46% of responding teachers attributed primary responsibility to their IT teams, while 40% believed it was a collective responsibility among all staff. Only 9% acknowledged the role of senior leadership in managing cyber security.

Swann emphasised the importance of leadership involvement in cyber security efforts, asserting, “Cyber security isn’t just an IT problem; it’s a leadership responsibility. Regular backups and a clear response plan can make a huge difference when things go wrong.”

Steps for Schools to Enhance Cyber Security

More than half of the surveyed secondary schools, specifically 55%, have implemented measures to safeguard against cyber attacks. These actions include establishing a cyber security policy, conducting risk assessments, and instituting backup and recovery procedures. Ofqual is calling on the remaining schools to adopt similar strategies to bolster their defence against cyber threats.

To assist schools in enhancing their cyber security framework, Ofqual suggests that senior leaders schedule a review with their IT lead, download the Department for Education’s cyber response plan template, and ensure that their institution is equipped to recover swiftly from potential cyber attacks by visiting the Department for Education’s Cyber Security Hub.

Survey Methodology and Additional Information

The survey, conducted by Teacher Tapp on behalf of Ofqual on 13 July 2026, involved responses from 3,775 secondary teachers across England. When considering school responses, only one response per institution was accepted, with the most senior teacher selected, resulting in a sample that represented up to 2,162 schools. For further information or to request a copy of the poll, interested parties can contact media@ofqual.gov.uk.