Still no sign of DfE’s cyber security scorecard scheme 

The rollout of a cyber security tool to help schools amid rising hack attacks has been delayed by more than a year

The rollout of a cyber security tool to help schools amid rising hack attacks has been delayed by more than a year

24 Sep 2023, 5:00

More from this author

A cyber security scorecard tool for schools has been delayed by the DfE

The rollout of a new cyber security tool to help schools “safeguard their pupils’ education” amid rising hack attacks has been delayed by over a year and a half. 

And it is still not known when the ‘Cyber Secure’ tool will be launched.  

Following a spate of high-profile cyber-attacks, the Department for Education (DfE) piloted the application in schools between September and November 2021. It intended to launch the scheme nationally in January 2022.  

However, the DfE told Schools Week: “Pilots of this nature take time to develop and this was delayed due to the ongoing impact of the Covid-19 pandemic.” 

Its launched was pushed back until “the start” of this academic year. However, three weeks into term there is still no sign of it. 

The DfE added that, since announcing the scheme two years ago, it had “reiterated and tested the content alongside cyber-security experts to ensure sufficient subject coverage to increase resilience within school environments.” 

The free and anonymous self-assessment tool allows schools to assess their cyber-security measures through a grading system of 0 to 5.  

A freedom of information (FOI) response on the results of the pilot – in which 50 schools were asked to review the tool – showed views were mixed. 

One school told the department it would be “lucky if anyone bothers after seeing what it involves” due to staff already being “overworked”. 

School responses led to cyber security tool changes

Another school said it “didn’t like anything about it”, adding that the tool was a “complete waste of time”. 

However, the responses led to “several iterations and changes”. 

The tool was first announced by schools minister Nick Gibb in May 2021, when he revealed the sector was struck by more than 70 ransomware attacks during the pandemic. 

He said the tool would “enable schools to assess their cyber security, helping school leaders and staff safeguard their pupils’ education”. 

A government-commissioned survey carried out between September and January found education institutions were more likely to have identified cyber breaches or attacks in the past year than the average UK business.

The survey of 241 primaries and 217 secondaries by market research firm Ipsos found 41 per cent of primaries and 63 per cent of secondaries had identified breaches or attacks in the past 12 months.  This compared with 32 per cent of 2,263 surveyed businesses. 

More from this theme


Poverty: Trusts spend six-figure sums to support ‘crisis’ families

News comes amid calls for chancellor Jeremy Hunt to hand out more education cash in next week's budget

Jack Dyson

Heads and teachers working longer despite workload push

Key government workforce survey reveals longer working weeks, less job satisfaction and more anxiety

Samantha Booth

Number of children ‘missing education’ rises a quarter

117,000 children were not registered at a school and not receiving a suitable education elsewhere at some point last...

Freddie Whittaker

‘Elite’ Star and Eton sixth forms reveal ‘clearing house’ careers role

Partnership between academy trust and top private school also opens new 'think and do' tank

Schools Week Reporter

Reception baseline test: Partial move to digital delayed

Standards and Testing Agency had planned to move some elements of the test on-screen from 2024

Freddie Whittaker

Give parents termly window to request childcare, schools told

Ahead of the launch of the wraparound childcare programme, the government has published new guidance for schools

Jack Dyson

Your thoughts

Leave a Reply

Your email address will not be published. Required fields are marked *

One comment

  1. This is really unfortunate and just increases the risks to schools, already this month 3 more schools have been cyber attacked! And these are only the ones known in the public news domain… We also know that schools are already overworked and we’re happy to fill the gap and help wherever we can. Our approach and solutions are straight forward with minimal involvement and time required from the school but making a significant impact to your schools cybersecurity and safety.