The Department for Education (DfE) has announced an important change in IT security requirements for Colleges and Specialist Post-16 Institutions (SPIs).
Starting in the 2024-2025 funding year, these institutions must now achieve the IASME Cyber Essentials certification to meet new cybersecurity standards.
This means all settings need to have it in place by July 31, 2025, to comply with the mandate for funding.
Useful Cyber Essentials FAQs for Education:
Scoping & Networks
- Student/guest networks are out of scope for Cyber Essentials.
Multi-Factor Authentication (MFA)
- Not required for student devices.
- Mandatory for all cloud services where MFA is available.
Student Devices
- If connected to a guest/student network, they’re not in scope.
- If using a staff network, they are in scope.
Unsupported Devices/Operating Systems
- Unsupported devices that are within scope must be addressed.
Patch Management
- All in-scope systems must be patched within 14 days, without exception.
Why Choose Evolve North for Your Cyber Essentials Certification in Education?
Evolve North has extensive experience supporting Universities, Colleges, Schools, and Academy Trusts in achieving Cyber Essentials and Cyber Essentials Plus certifications. With over 5 years of expertise in the education sector, we understand the unique challenges and complexities faced by institutions.
We are certified to help you navigate the Cyber Essentials journey with confidence:
- Cyber Advisor – Assured Service Provider (IASME)
- Cyber Essentials Certifying Body (IASME)
- Cyber Essentials Plus Certifying Body (IASME)
- Cyber Assurance Certifying Body (IASME)
- Cyber Incident Exercising Provider (NCSC)
Links to the DfE Announcement and more reading:
- DfE Announcement
- IASME Cyber Essentials Knowledge Hub – Resources specifically for education sector compliance.
For a fast quote, send us your staff and student count, and we’ll get back to you within 24 hours. If you’d like to discuss the process, costs, or any questions, feel free to reach out on 01748 905 002 or info@evolvenorth.com