Cyber security in schools: real risks, real fixes
Guest: Ian Stockbridge,
Intro / Episode overview
Cyber security is one of those topics everyone knows is important, but very few schools have the time, budget, or headspace to get right.
In this first episode of EdTechStuff, I sit down with Ian Stockbridge to talk honestly about what cyber security looks like in real schools and trusts, not in vendor brochures.
This is about practical steps, common mistakes, and where to focus first if you’re already stretched.
What you’ll get from this episode:
A clear picture of the most common cyber risks facing schools right now
Why “buying another tool” rarely fixes the problem
The balance between people, process, and technology
What small IT teams can realistically do to reduce risk
Where many schools are still exposed without realising it
Key discussion points
Why schools are attractive targets, even if they don’t think they are
The gap between compliance and real security
How phishing, identity, and poor configuration still cause most incidents
The role of staff awareness and training
When external support makes sense, and when it doesn’t
Practical takeaways
If you only do one thing after listening:
Take a fresh look at identity security. Most serious incidents still start with a compromised account, not a clever hack.
Other actions worth considering:
Review who has admin access and why
Check what logging you actually have turned on
Make sure staff know how to report suspicious emails quickly
Focus on basics before chasing “advanced” solutions
Who this episode is for
Network Managers and IT Technicians in schools
IT Directors and Heads of IT in MATs
Anyone responsible for keeping systems safe with limited time and budget
About the guest
Ian Stockbridge (Secure Schools) works with schools and trusts across the UK to improve cyber security in a way that’s realistic and affordable. His focus is on reducing risk through better configuration, awareness, and sensible use of existing tools, rather than selling fear or unnecessary complexity.
Related episodes
Episode 9: Cyber security in MATs and building a SOC approach on a budget
Episode 8: Microsoft A3 vs A5 and what actually improves security
Episode 4: Copilot readiness, governance, and reducing your blast radius
Have a question or want to suggest a topic?
If this episode raised something you’re dealing with right now, get in touch.
Future episodes are shaped by real problems from real schools.