& 
Information Security in Education eLearning
Online information security training for schools: pupil records, safeguarding files and staff data, and the everyday handling that keeps them where they belong.
Who it is for
Who this information security in education course is for
Schools hold some of the most sensitive personal data there is: safeguarding records, medical information, SEND files and family circumstances. They also have high staff turnover, shared devices and a lot of paper.
- All school staff, teaching and support
- Office, admin and attendance teams
- Senior leaders and DSLs
- IT and data protection leads
- Governors handling school information
- Supply and temporary staff
Course content
What the information security in education course covers
Six short modules on classifying, handling, sharing and disposing of school information.
What school information security protects
Pupil, family and staff data, and why school data is unusually sensitive.
Classifying information
Recognising what is sensitive in a school context, including safeguarding records.
Access and devices
Passwords, shared devices, laptops taken home and screens in classrooms.
Sharing information
Email, attachments, checking recipients, and sharing with other agencies.
Paper and physical security
Registers, printouts, filing, visitors and the office desk.
Incidents
Recognising a data breach in a school and reporting it immediately
Outcomes
What you will be able to do afterwards
- Recognise sensitive information in a school setting
- Handle safeguarding and SEND records appropriately
- Use shared devices and take-home laptops safely
- Check recipients before sharing pupil or staff information
- Apply physical security to paper records and screens
- Recognise and report a data breach without delay
Your legal duty
The law behind information security in education training
The UK GDPR requires appropriate technical and organisational measures to keep personal data secure, with the Data Protection Act 2018 alongside it and the Information Commissioner's Office as regulator. Staff awareness is one of the organisational measures regulators expect.
Schools also handle special category data and safeguarding information, where the consequences of a breach are more serious. Your data protection officer and your safeguarding lead hold the school's specific procedures for those.
- UK GDPR - appropriate technical and organisational measures
- Data Protection Act 2018
- Regulated by the Information Commissioner's Office (ICO)
- Safeguarding records follow the school's own safeguarding procedures as well
Practicalities
How the course works
For employers
Information Security in Education training for a team
Schools take on supply and temporary staff constantly, and they get access to systems on day one. Covering everyone at induction is the practical approach.
- One invoice instead of a card payment per person
- Licences allocated as people join, so induction is covered
- Completion and expiry reporting for your records
- Renewal reminders before certificates lapse
- Bespoke versions built around your own procedures
The data protection principles themselves are covered by the GDPR course. See the GDPR course →
Information Security in Education eLearning: common questions
GDPR covers the principles, rights and lawful bases. This course covers the practical handling: devices, sharing, paper, classrooms and incidents in a school setting.
It covers handling them as especially sensitive information. The safeguarding procedures themselves come from your designated safeguarding lead.
Yes, and it is one of the better uses. Supply staff get system access quickly and rarely receive school-specific data training.
Report it immediately. The course is built around fast reporting, because the window between a mistake and reporting it is where the harm compounds.
About 30 minutes, with no time limit: start it, pause it, and come back whenever suits. The certificate is issued the moment you finish.
Yes. It runs in a browser on any modern phone, tablet or computer, with nothing to install.
Yes. Open a business account and we invoice you for the licences, which you allocate as people need them, with completion reporting included.
Related