Phishing simulation

A phishing email is when an attacker uses a fake domain or email address that typically imitates an authentic organisation. The email often includes a link to a site which appears genuine, where they will try to get you to share your personal or financial information with them.

Protecting yourself and your school

Being aware of some of the techniques cyber criminals use to obtain personal data, for example passwords, banking details or other sensitive information can help you recognise and avoid phishing scams.

You can find out more about the different methods that attackers may use on our dedicated phishing page. You can also complete the training modules below.

While it is important to be proactive in identifying and reporting suspected phishing messages, the NCSC’s position is that no training package, including phishing simulations, can teach users to spot every phishing attempt.

That is why having a clear strategy to respond to cyber attacks is also essential.

Incident preparedness

With the increasing reliance on technology and online services, having a clear strategy on how to manage a cyber security incident can help minimise any disruption to school operations. This strategy should be a core part of school planning and management arrangements, with cyber security considered and referenced across the relevant school policies, including safeguarding and security policies. It is also important schools have an incident management plan in place.