The Classroom's Dark Side: Cyber crime from the Classroom
Joe Tidy, BBC's Cyber correspondent has published a blog about cyber crime in schools following the ICO issuing a warning about the 'worrying trend' of students hacking their own school and college IT systems for fun or as part of dares. We explore the situation and what you should do when it happens.
The NCA reports that 1 in 5 children were found to engage in illegal activity online. A survey of children aged 10-16 showed that 20% engage in behaviours that violate the Computer Misuse Act, which criminalises unauthorised access to computer systems and data. The figure is higher for those who game standing at 25%.
The ICO reports that half of school insider attacks are caused by students.
Almost a third of insider attack incidents caused by students guessing weak passwords or finding them jotted down on bits of paper.
Teen hackers are not breaking in, they are logging in.
Please note the Computer Misuse Act also covers staff accessing data they shouldn't.
Children are hacking into school systems - and it may set them up for a life of cyber crime.
What should you do if you find students have accessed systems in an unauthorised way?
A cyber incident in a school by a pupil, is more than just a technical issue. It requires a multi-disciplinary response to manage legal, reputational and safeguarding risks effectively.
- Consider that your organisation has suffered a cyber attack and follow your normal procedure:
- Activate your Cyber Incident Response Plan
- Investigate and isolate the affected systems
- Change passwords
- Preserve evidence
- Inform key staff, notify the headteacher or principal.
- Report the data breach to your DPO, Action Fraud, the DfE and the National Crime Agency.
- Contact the Police
- Involve the DSL.
- Assess any data breach risks and consult with your DPO.
- Review the Cyber Choices programme which is designed to reduce cyber crime, including illegal hacking of computers and networks, denial of service and the writing, distribution or deployment of malware. The programme encourages individuals to make informed choices in their use of technology and promotes positive, legal cyber opportunities. Cyber Choices Programme
Training and Awareness:
Ensure continual cyber training and awareness for staff, pupils and parents.
ICO News: Insider threat of students leading to increasing number of cyber attacks in schools
BBC Blog: Children hacking their own schools for 'fun', watchdog warns
NCA Report: One in five children found to engage in illegal activity online