Cyber Essentials is the government-backed framework that sets out the five basic controls every organisation should have in place to protect itself from the most common cyber attacks. Schools are a prime target. This audit tells you how well your defences hold up.
You don’t need to be a large organisation to be attacked. Schools hold sensitive data on pupils, staff, and families. They run legacy systems. They have hundreds of users, including children, all accessing the same network. And they’re often under-resourced when it comes to IT security.
Cyber criminals know all of this. That’s why schools are targeted more than most people expect.
Our Cyber Essentials Audit maps your school’s current IT environment against the five Cyber Essentials controls and gives you a clear, jargon-free report on where you’re meeting the standard and where you’re not.
The Five Controls
Firewalls – is your network boundary properly protected?
Secure configuration – are your devices and software set up securely by default?
User access control – do the right people have the right access, and no more?
Malware protection – are you protected against malicious software?
Patch management – are your devices and software kept up to date?
What you get
A written audit report covering each of the five control areas, with a clear assessment of your current position, any gaps identified, and a prioritised set of recommendations. We’ll also flag anything that has a direct bearing on your safeguarding or data protection obligations.
Who’s this for?
Headteachers, business managers, and governors who want to understand their school’s cyber security posture, whether you’re thinking about applying for Cyber Essentials certification, preparing for an inspection, or just want peace of mind.
Pricing
Fixed price. No surprises.
Secondary Schools – £495 (ex VAT) | Primary Schools – £395 (ex VAT)
Ready to get started?
Contact us to book your Cyber Essentials Audit.
FAQs
Is this the same as getting Cyber Essentials certified?
No. This is an independent audit against the Cyber Essentials framework. It gives you a clear picture of where you stand and what you’d need to do to achieve certification, but certification itself is a separate process with an accredited assessor. We can advise on the right next steps once the audit is complete.
Do we need Cyber Essentials certification?
Schools aren’t currently required to hold Cyber Essentials certification, but the DfE’s cyber security standards for schools are closely aligned with the framework. Many MATs and local authorities are also starting to require it of their schools.
How long does the audit take?
The assessment typically takes half a day, with a written report to follow within five working days.