DfE Mandates Cyber Essentials for Colleges 

The Department for Education (DfE) has announced an important change in IT security requirements for Colleges and Specialist Post-16 Institutions (SPIs).

Starting in the 2024-2025 funding year, these institutions must now achieve the IASME Cyber Essentials certification to meet new cyber security standards.

This means all settings need to have it in place by July 31, 2025, to comply with the mandate for funding.

Useful Cyber Essentials FAQs for Education:

Scoping & Networks

  • Student/guest networks are out of scope for Cyber Essentials.

Multi-Factor Authentication (MFA)

  • Not required for student devices.
  • Mandatory for all cloud services where MFA is available.

Student Devices

  • If connected to a guest/student network, they’re not in scope.
  • If using a staff network, they are in scope.

Unsupported Devices/Operating Systems

  • Unsupported devices that are within scope must be addressed.

Patch Management

  • All in-scope systems must be patched within 14 days, without exception.

 

Why Choose Evolve North for Your Cyber Essentials Certification in Education?

Evolve North has extensive experience supporting Universities, Colleges, Schools, and Academy Trusts in achieving Cyber Essentials and Cyber Essentials Plus certifications. With over 5 years of expertise in the education sector, we understand the unique challenges and complexities faced by institutions.

We are certified to help you navigate the Cyber Essentials journey with confidence:

  • Cyber Advisor – Assured Service Provider (IASME)
  • Cyber Essentials Certifying Body (IASME)
  • Cyber Essentials Plus Certifying Body (IASME)
  • Cyber Assurance Certifying Body (IASME)
  • Cyber Incident Exercising Provider (NCSC)

Links to the DfE Announcement and more reading:

For a fast quote, send us your staff and student count, and we’ll get back to you within 24 hours. If you’d like to discuss the process, costs, or any questions, feel free to reach out on 01748 905 002 or info@evolvenorth.com

…need more information? Visit our Cyber Essentials home page CLICK HERE

Arrange a FREE Consultation

Want to learn more about improving your organisation's security? Our team is here to answer your questions and explain the options available. In a free consultation, we'll help you understand the services we offer and how they can support your goals. It's a simple, no-obligation way to start exploring the right approach for your business.