
Cyber Security Training for School Staff
Equip your school staff to recognise and respond to cyber threats with practical, education-specific training from SchoolCare. Our programmes include flexible on demand whole-staff training, simulated phishing campaigns, governor briefings, and ongoing awareness content, meeting DfE and RPA training requirements.
What the Secure Schools Platform Delivers
Equip your staff to recognise and respond to cyber threats through the Secure Schools training platform. Delivering NCSC-aligned training modules, automated phishing simulations, and real-time compliance tracking — all built specifically for the education sector. Meets DfE Digital Standards requirements and RPA training conditions of cover.
NCSC-Certified Training
Core cyber awareness modules certified by the National Cyber Security Centre, covering the fundamentals every school staff member needs: recognising threats, safe data handling, and incident reporting. Meets the RPA condition of cover requiring annual NCSC-certified training for all staff with IT access.
Phishing Simulations
Automated simulated phishing campaigns that test staff readiness with realistic, education-specific scenarios — fake SIMS notifications, bogus DfE emails, fraudulent supply teacher invoices, and social engineering attacks that exploit school culture. Results reported at aggregate and individual level with targeted follow-up training.
Social Engineering Awareness
Dedicated modules covering the tactics criminals use to manipulate school staff: pretexting, baiting, tailgating, and impersonation. Staff learn to recognise and challenge suspicious requests, whether they arrive by email, phone, or in person.
Password Quality Assessment
Evaluates password practices across the school, identifying weak, reused, or compromised credentials. Integrates with training modules to educate staff on creating and managing strong passwords without resorting to unsafe workarounds.
Governor Training Module
Focused module covering DfE cyber security responsibilities, GDPR governance obligations, and strategic oversight of school cyber security. Designed for governors and senior leadership who need strategic awareness without the technical depth of staff-facing modules.
New Starter Onboarding
Automated enrolment ensures new staff complete essential cyber awareness training from their start date. The platform assigns the appropriate module pathway and tracks completion, ensuring no new starter slips through the gap regardless of when they join.
Track, Evidence, Report
Monitor training completion rates, phishing simulation results, and module progress across every staff member in real time. Filter by school, department, or role. Identify individuals who need additional support before gaps become risks.
Real-Time Compliance Dashboard
The Secure Schools platform provides a live compliance dashboard showing overall training completion, phishing pass rates, module progress by school, and trend data over time. Evidence is always audit-ready for governor reports, Ofsted queries, and RPA claims.
Attendance & Completion Records
The platform maintains a complete audit trail of training completion, assessment scores, and simulation results. Evidence is ready for governor reports, Ofsted queries, RPA claims, and DfE Digital Standards self-assessment — exportable at the click of a button.
Why Platform-Based Training Works
Source: Deloitte, 2023
Source: UK Government, 2025
Staff are consistently the primary target for attackers — and the most effective line of defence when properly trained. Criminals are moving beyond basic phishing to sophisticated pretexting and impersonation attacks that specifically target education staff. A one-off annual training session cannot keep pace with evolving threats — continuous, platform-delivered awareness keeps staff current throughout the year.
The Secure Schools platform means every staff member receives consistent, up-to-date training regardless of when they joined, what role they hold, or which site they work at. Compliance is tracked automatically, and evidence is always audit-ready.

