Cyber-Education Promotion

Cyber Education Strategy 2025

Overview

Evolve-IT Ltd has designed a comprehensive cybersecurity education package for schools in the UK, targeting children aged 4-16. The goal is to enhance digital literacy, promote safe online practices, and protect students from cyber threats by explaining the "why" behind cybersecurity warnings. By using human psychology principals to develop a more effective syllabus we empower students, staff and parents to protect themselves and others in the war on cyber-crime.  The training package including all resources and in-person delivery will be available free of charge however there would be a minimal cost to schools solely to cover subsistence expenses of Evolve-IT Ltd.
(Further detail on these charges is available by contacting info@evolve-it.uk).

Market Analysis

Target Audience: Schools in the UK, specifically primary and secondary schools. 

Age Group: Children aged 4-16, with the phase 1 rollout being focusing on primary age 4 – 11 years.

Reasoning:  Increasing reliance on digital technology in education, particularly the rapid pace at which AI technology is being driven, has heightened the need for action to implement greater cybersecurity measures. Schools are incredibly vulnerable to cyber-attacks, and children are exposed to online risks. The data held by schools contains a vast array of sensitive category PII (personally identifiable information), the consequence of this being compromised by way of a cyber breach is not only potentially financially crippling but more importantly endangers the lives of children and young people. Safeguarding must be the priority of all educational settings along with parents and carers. Research shows us that security awareness training for the adult population is much less effective due to the natural evolution of psychological acceptance of new ideas. The peak age for receptivity for impressionable education is circa aged 8-11 years however prior to age 8 children instinctively look to adults for pro social influence due to their cognitive developmental levels. 

Objectives

1.  Enhance Cyber Awareness: Educate students, teachers, and parents about cybersecurity risks and safe online practices. This is particularly important for students who are classed as vulnerable due to socio-economic factors and/or have SEND.

2.  Implement Cybersecurity Curriculum: Deliver age-appropriate cybersecurity modules integrated seamlessly as microlearning exercises into the school curriculum so as not to overwhelm or cause psychological reactance. This is fundamentally important to be mindful of as the workload on teaching staff is at record levels in the UK. The responsibility for the delivery of this should, and will not, fall to the teaching staff.  Evolve-IT Ltd and its authorised third party partners are wholly responsible for the training, delivery and ongoing support for this national programme offer.  

3.  Explain the "Why": Ensure students understand the reasons behind cybersecurity warnings to foster deeper comprehension and behavioural change.

4.  Provide Resources and Training: Offer tools, resources and deliver interactive and engaging training sessions for students, staff, parents & stakeholders.

5.  Build Partnerships: Collaborate with cybersecurity organisations and government bodies to support the initiative, ensuring the barriers to accessing Cyber-hygiene/IT/Tech through fear, socio-economic factors etc are eradicated.

Strategy

1. Curriculum Development

• Age-Appropriate Modules: Deliver tailored content for different age groups (4-7, 8-11, 12-16) focusing on key cybersecurity concepts.
• Interactive Learning: Use games, quizzes, and interactive activities to engage students, staff and parents.
• Contextual Learning: Incorporate real language explanations of the "why" behind each cybersecurity concept and warning within the curriculum.
• Real-Life Examples: Use real-life scenarios to illustrate the consequences of ignoring cybersecurity warnings not to create fear but inspire confidence to question and push back even when under pressure from threat adversaries (hackers) in socially engineered situations.
• Regular Updates: Ensure the training programme is regularly updated to address emerging threats.

2. Training and Workshops

• Teacher Training: Conduct workshops to equip teachers with the knowledge to teach cybersecurity effectively.
• Student Workshops: Organise interactive sessions for students to learn about online safety and understand the "why" behind cybersecurity practices.
• Parent Seminars: Hold seminars to educate parents on how to protect their children online.
• Q&A Sessions: Include Q&A sessions where students can ask about the "why" behind various cybersecurity measures.

3. Resources and Tools

• Educational Materials: Provide schools with posters, handouts, and digital resources on cybersecurity, including explanations of the importance of cybersecurity warnings.
• Online Platforms: Signpost students, parents, and staff to a secure online platform to access learning materials.
• Cyber Hygiene Practices: Promote good cyber hygiene practices, such as strong passwords, how to spot a phishing style attack on multiple platforms not just email, being aware that not everyone is who they say they are and promoting safe browsing habits.

4. Partnerships and Collaboration

• Government Collaboration: Work alongside the Department for Education and National Cyber Security Centre (NCSC) to align with national standards.
• Cybersecurity Experts: Partner with cybersecurity organisations to provide expertise and resources. Negotiations are currently in place to roll out a free security monitoring tool to educational settings for a period of 12 months to demonstrate the benefits to their organisation, followed by a non-obligatory, heavily subsidised package for staff after this period with the students remaining FOC.
• Community Engagement: Engage local communities and organisations to support the initiative.

Implementation Plan

Phase 1: Research and Development (Status Complete)

• Conduct market research to understand the specific needs of schools.
• Develop the cybersecurity curriculum and resources.

Phase 2: Pilot Program

• Launch pilot programs in selected schools to assess the curriculum and training sessions.
• Gather feedback and make necessary adjustments.

Phase 3: Full-Scale Rollout

• Implement the program across schools in the UK.
• Monitor progress and provide ongoing support.

Evaluation and Monitoring

• Feedback Mechanisms: Collect feedback from students, teachers, and parents to assess the effectiveness of the program.
• Performance Metrics: Track key metrics such as student engagement, knowledge retention, and incident reports.
• Regular Reviews: Conduct regular reviews to ensure the program meets its objectives and make improvements as needed.

By implementing this strategy, we aim to create a safer digital environment for children in the UK, empowering them with the knowledge and skills to navigate the online world securely. Explaining the "why" behind cybersecurity warnings will ensure students not only follow safe practices but also understand their importance, leading to more effective and lasting cybersecurity awareness. This approach to cyber-education will not only be a positive benefit in the short term but also as the children and young people progress into adulthood those skills will strengthen entire organisations leaving them less vulnerable. Human risk/insider risk currently accounts for 88% of all breaches in businesses – our goal is to reduce this to below 20% by 2050. 

 Age differences in the prosocial influence effect

Lucy Foulkes, Jovita T Leung, Delia Fuhrmann, Lisa J Knoll, Sarah-Jayne Blakemore

https://blog.knowbe4.com/88-percent-of-data-breaches-are-caused-by-human-error