& 
Information Security in Education eLearning
Online information security training for schools: pupil records, safeguarding files and staff data, and the everyday handling that keeps them where they belong.
Who it is for
Who this information security in education course is for
Schools hold some of the most sensitive personal data there is: safeguarding records, medical information, SEND files and family circumstances. They also have high staff turnover, shared devices and a lot of paper.
- All school staff, teaching and support
- Office, admin and attendance teams
- Senior leaders and DSLs
- IT and data protection leads
- Governors handling school information
- Supply and temporary staff
Course content
What the information security in education course covers
Five short lessons covering what school information security protects, access and devices, sharing information, paper and physical security, and incidents, then a 12-question assessment.
What school information security protects
The sensitive information schools hold, why it matters, and the law behind it.
Access and devices
Screens, passwords and MFA, shared devices and take-home laptops.
Sharing information
Checking recipients, emailing parents, and sharing information to keep children safe.
Paper and physical security
Registers, staffrooms, printers, offices and disposal.
Incidents
What a data breach is, how to report it, and what happens next.
Outcomes
What you will be able to do afterwards
- Recognise sensitive information in a school setting
- Use school devices and accounts securely
- Share pupil and staff information safely, including for safeguarding
- Apply physical security to paper records and screens
- Recognise and report a data breach without delay
Your legal duty
The law behind information security in education training
The UK GDPR requires appropriate technical and organisational measures to keep personal data secure, with the Data Protection Act 2018 alongside it and the Information Commissioner's Office as regulator. Staff awareness is one of the organisational measures regulators expect.
Schools also handle special category data and safeguarding information, where the consequences of a breach are more serious. Your data protection officer and your safeguarding lead hold the school's specific procedures for those.
- UK GDPR - appropriate technical and organisational measures
- Data Protection Act 2018
- Regulated by the Information Commissioner's Office (ICO)
- Safeguarding records follow the school's own safeguarding procedures as well
Practicalities
How the course works
Would you rather have a tutor?
The data protection principles themselves are covered by the GDPR course.
For employers
Information Security in Education training for a team
Schools take on supply and temporary staff constantly, and they get access to systems on day one. Covering everyone at induction is the practical approach.
- One invoice instead of a card payment per person
- Licences allocated as people join, so induction is covered
- Completion and expiry reporting for your records
- Renewal reminders before certificates lapse
- Bespoke versions built around your own procedures
Information Security in Education eLearning: common questions
GDPR covers the principles, rights and lawful bases. This course covers the practical handling: devices, sharing, paper, classrooms and incidents in a school setting.
It covers handling them as especially sensitive information. The safeguarding procedures themselves come from your designated safeguarding lead.
Yes, and it is one of the better uses. Supply staff get system access quickly and rarely receive school-specific data training.
Report it immediately. The course is built around fast reporting, because the window between a mistake and reporting it is where the harm compounds.
About 30 to 45 minutes, with no time limit: start it, pause it, and come back whenever suits. The certificate is issued as soon as you pass the end assessment.
Yes. It runs in a browser on any modern phone, tablet or computer, with nothing to install.
Yes. Open a business account and we invoice you for the licences, which you allocate as people need them, with completion reporting included.
Related