Before you start
Practical awareness training for school and college staff.
This is practical awareness training rather than technical training for IT specialists, and it is intended for adult staff rather than pupils.
It is suitable for teachers, teaching assistants, office staff, senior leaders, pastoral teams, governors where appropriate, site and support staff, temporary and supply staff, and new starters.
For businesses, charities and other workplaces, use our General Cyber Security Training. Use General Cyber Security Training
What the course covers
The official NCSC school-staff training is an external required step in the overall Education course journey, not a CompTech-authored lesson.
- phishing and suspicious emails
- links and attachments
- passwords and MFA
- account and device security
- sensitive information
- social engineering and ransomware
- reporting concerns
- school resilience, filtering and monitoring
- NCSC school-staff training
Useful resources to take back to work
The free PDF and editable Word pack includes incident worksheets, worked examples, a 15-minute team briefing, a 30-minute discussion exercise, facilitator notes and an action plan, plus a separate CompTech and NCSC evidence register template.
Open the free staff resource packCourse modules and review history
- Why education is targeted
- Learning, safety and operations depend on secure systems
- Common ways attacks begin
- Accounts, incidents and recovery
- Recognise how incidents begin
- Spot the fake shared-document alert
- Follow a spoofed shared-file link
- Protect every school account with a unique login
- Protect devices and manage access
- A school incident unfolds
- Monday morning at Northbridge College
- A device displays a ransom demand
- Reduce impact before an incident
- Cyber incidents can become safeguarding incidents
- National Cyber Security Centre training
- Education cyber-cover conditions
- NCSC cyber security training
- Cyber and safeguarding teams must work together
- Five behaviours worth remembering
- Put your learning into practice
- Choose a safe next step
- Take the learning back to work
Maintained by CompTech IT Solutions. Version 2026.10. Reviewed on .
What changed: Added practical staff packs, realistic decision review, optional certificate name and accessible certificate text.
Please note: This is not an external accreditation or NCSC endorsement.
References: NCSC staff training, NCSC password guidance and DfE cyber security standard.
What you'll take away
Cyber security in schools depends on everyday decisions too.
Schools use technology across teaching, administration, safeguarding, finance and communication. This training helps staff understand their part alongside the school’s technical controls and policies.
This training gives school staff practical guidance without expecting them to become cyber security specialists.
Recognise suspicious activity
Spot warning signs in emails, messages, login pages and unexpected requests.
Protect school accounts
Use stronger account habits and pay attention to unexpected MFA prompts.
Handle information carefully
Pause and verify before sharing, uploading or sending sensitive school information.
Report concerns early
Use the school’s cyber and safeguarding routes where relevant so the right people can act.
Completion and privacy
Keep the CompTech record and official evidence separate.
Further help
Want a broader view of school technology and security?
We can help you review school ICT, security responsibilities and the priorities that need attention next.