COMPTECH IT SOLUTIONS
Education cyber awareness staff pack | Version 2026.10

Manager briefing and team discussion

Allow 15 minutes after staff complete the course. Use fictional examples and avoid naming people involved in real mistakes.

Beforehand: agree incident contacts, the alternative route and the policy or process staff should follow.

Ask: a known supplier emails new bank details in a real invoice thread. How do we verify the change independently? Who can approve it?

Ask: someone entered credentials on an unexpected page. How can they report immediately without fear of blame?

Ask: email is down and a device shows a ransom demand. Where is our offline contact card? What should staff avoid doing?

Ask: sensitive pupil information went to the wrong recipient. Which IT, data and safeguarding routes apply, and who coordinates them?

Keep CompTech completion and official NCSC evidence separate. Follow current school/trust and RPA requirements; this pack is not compliance evidence.

Agree one improvement, an owner and a due date. Test that staff can find the reporting route.

Action: __________  Owner: __________  Due: __________

Return to one scenario at the next team meeting. Check understanding and confidence to report, not just attendance.

Free to adapt for internal staff training. Check your organisation’s procedures before use.
Source: https://www.comptechits.co.uk/education/cyber-security-training/resources/