STRENGTHEN YOUR
SCHOOL'S CYBER
DEFENCES
In an era where online threats to school IT systems are on the rise and growing more sophisticated, safeguarding your institution is paramount. Our security audit goes beyond the ordinary, providing a thorough technical examination, a detailed report, and actionable recommendations to fortify your school’s defences.
There is an escalating risk of cyber-attacks and data breaches, so every school must undergo regular IT Security Audits. Recent studies indicate that 76% of secondary schools experienced a data breach or cyber-attack in the past 12 months, with over 90% of governors and senior management prioritising cybersecurity*.
At CSE, we take a comprehensive approach to security audits, ensuring a meticulous examination of your IT infrastructure.
Our audit scope encompasses critical areas, including but not limited to:
-
Account Security: Rigorous testing of user accounts and administrator privileges to identify vulnerabilities.
-
Password Policies: Evaluation of password strength, complexity, and encryption to enhance overall security.
-
Security Policies: Thoroughly examine existing security policies to ensure alignment with best practices and regulatory standards.
-
File Access Control: Assessment of file access permissions and controls to prevent unauthorised data exposure.
-
Authentication Services: In-depth testing of authentication services and other system API interfaces for robust security.
-
Internal Network Vulnerability Testing: Identifying and mitigating vulnerabilities in internal network infrastructure. We contract expert ICT Security penetration testers Caretower to undertake penetration testing at schools. Caretower agrees on a test scope before testing and carries out all testing following the agreed scope. All testing is carried out following Government standards and is repeated annually.
-
Firewall and Server Build Review: Comprehensive assessment of firewall configurations and server build to enhance resilience.
-
Database Settings Review: Evaluation of database settings to prevent unauthorised access and ensure data integrity.
-
Network Segregation Testing: Testing the effectiveness of network segregation to prevent lateral movement of attackers.
CSE ensures that all testing aligns with DfE and NCSC Cyber Security guidance and is conducted annually or following significant architectural changes to the system. The resulting report, a granular overview of the findings, provides actionable insights to strengthen your school’s cybersecurity posture.
*Statistics based on recent findings.