Improved Resilience in Educational Institutions
Recent data from Ofqual indicates that schools and colleges throughout England are showing notable improvement in their ability to recover from cyber security incidents. However, it is evident that there are still significant gaps in the preparedness of these institutions for potential attacks. In light of Cyber Security Awareness Month, Ofqual is urging educational establishments to enhance their protective measures, ensuring that staff are well-equipped to respond effectively in the event of a cyber incident.
The findings stem from Ofqual’s third annual survey, which focuses on the academic year from 2025 to 2026. Notably, the percentage of schools reporting cyber incidents has decreased to 27%, a decline from 29% in the previous year and 34% in the year before that.
Faster Recovery Times and Reduced Damage
When cyber incidents do occur, schools are demonstrating a quicker recovery rate, with 66% of institutions able to restore their systems immediately, an increase from 55% in the preceding academic year. Additionally, the extent of critical damage resulting from cyber attacks has diminished, now standing at 7%.
Amanda Swann, Executive Director of Delivery at Ofqual, commented on these developments: “It is encouraging to see that schools are bouncing back more swiftly. However, a cyber breach can lead to significant uncertainty for students, particularly if coursework or marks are compromised. Moreover, staff confidence may wane long after systems have been reinstated.”
Teachers have shared various experiences regarding their schools’ responses to cyber threats. One educator recounted how their IT team effectively identifies and mitigates ongoing attacks, while another teacher attributed heightened awareness and decreased harm to staff training initiatives. Unfortunately, not all schools have fared as well; one teacher reported a complete loss of network and email access, while another described an incident severe enough to necessitate police intervention, resulting in heightened anxiety among staff and students.
Understanding Responsibility for Cyber Security
In a new aspect of the survey, participants were asked to identify who holds primary responsibility for cyber security within their schools. The results revealed that 46% of teachers believe the IT team bears this responsibility, while 40% feel it is a collective duty among all staff members. Only 9% acknowledged the role of senior leadership in this critical area.
Ms Swann emphasised the broader implications of cyber security: “It is essential to recognise that cyber security transcends being merely an IT issue; it is fundamentally a leadership responsibility. Regular data backups and a well-defined response plan can significantly mitigate the impact when incidents occur.”
Encouraging Proactive Measures Among Schools
Encouragingly, over half of the secondary schools surveyed—55%—have proactively implemented measures to safeguard against cyber threats. These initiatives include formulating a cyber security policy, conducting comprehensive risk assessments, and establishing backup and recovery protocols. Ofqual is calling on the remaining schools to adopt similar precautions.
To facilitate this process, senior leaders are advised to schedule a review with their IT leads, download the Department for Education’s cyber response plan template, and ensure that their institutions are equipped for rapid recovery from potential attacks. For further resources, schools can visit the Department for Education’s Cyber Security Hub.
Further Information
For a copy of the poll results, interested parties can reach out to media@ofqual.gov.uk. The data regarding teacher responses is based on a sample of 3,775 secondary teachers across England, with school responses limited to one per institution, reflecting insights from up to 2,162 schools. The poll, conducted by Teacher Tapp on behalf of Ofqual, took place on 13 July 2026.