Phishing simulation
You have clicked on a link that was part of a phishing simulation.
Please be assured your personal data remains secure. Schools, like any organisation, are vulnerable to cyber crime. Hwb is running this exercise as a learning opportunity and a reminder to be vigilant against real phishing threats.
A phishing email is when an attacker uses a fake domain or email address that typically imitates an authentic organisation. The email often includes a link to a site which appears genuine, where they will try to get you to share your personal or financial information with them.
Protecting yourself and your school
Being aware of some of the techniques cyber criminals use to obtain personal data, for example passwords, banking details or other sensitive information can help you recognise and avoid phishing scams.
You can find out more about the different methods that attackers may use on our dedicated phishing page. You can also complete the training modules below.
Phishing awareness training
Our phishing training module will help you understand what phishing is and how it works, how you can identify phishing emails, different techniques of phishing and what you can do to protect yourself and your organisation.
Cyber security awareness training for school staff
This cyber security training module produced with the National Cyber Security Centre (NCSC) for Welsh schools is designed to support school staff to help improve their cyber resilience.
While it is important to be proactive in identifying and reporting suspected phishing messages, the NCSC’s position is that no training package, including phishing simulations, can teach users to spot every phishing attempt.
That is why having a clear strategy to respond to cyber attacks is also essential.
Incident preparedness
With the increasing reliance on technology and online services, having a clear strategy on how to manage a cyber security incident can help minimise any disruption to school operations. This strategy should be a core part of school planning and management arrangements, with cyber security considered and referenced across the relevant school policies, including safeguarding and security policies. It is also important schools have an incident management plan in place.
Supporting resources
You can consult Education Digital Standards and Guidance and the Cyber Security in Schools Guidance to help plan, develop and maintain an effective cyber incident response capability.
NCSC's website also includes guidance to support a cyber incident response.
Schools can also use the bilingual 360 Safe Cymru to self-assess their wider online safety provision, while the technology element will help to support the development of your school’s cyber security policies.