Cyber security begins at school
Students learning cyber security best practices could be better equipped in the workplace
Cyber attacks can be one of the most damaging things that can happen to an organization. Whether it’s a data breach or ransomware, falling victim to an attack can be extremely costly and disruptive, so knowing how to react to an attack is as important as knowing how to prevent one.
Despite this, businesses continue to struggle with keeping employees engaged with cyber security training. With adults apparently not grasping the importance of cyber security skills, there is a growing argument for introducing them while people are still at school, to ensure no one joins the workforce unprepared for the threats they may face.
In this episode, Jane and Rory speak to Matt Lorentzen, principal consultant at information security consultancy Cyberis, to explore how we can effectively instill cyber security best practices through the education sector and why simulated attacks could be an effective method through which common attack vectors can be taught.
Correction: The report cited at the start of this episode was incorrectly attributed to Freshworks, when it was in fact published by Fortinet.
Highlights
“From a student's perspective, I think people are interested in cyber security as a career. And as I said, I've worked in schools so I know that students are very interested in trying to break things. They are interested in the nuts and bolts, and it kind of appeals to that rebellious nature.”
“The benefit of being able to compromise a school environment for essentially deploying a ransomware attack is that that data is really important. And the disruption to that is quite an allure for attackers. And so we have seen, certainly in the last three years, this rise in schools becoming compromised and attackers using the data that they have access to as a blackmail tactic, essentially, to try and get schools to pay out.”
“You're kind of educating the future workforce by proxy as to the challenges and threats that they face. And as I said, those threats will not change as they emerge out of education and come into the workforce. Because, as I said before, the technologies and the platforms that you see in the workplace are pretty much identical to schools.”
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
Read the full transcript here.
Footnotes
- What is multi-factor authentication (MFA) fatigue and how do you defend against attacks?
- The ITPro Podcast: How can we stop insider theft?
- Harris Federation disables students' emails following ransomware attack
- Fortinet 2022 Cybersecurity Skills Gap [PDF]
- Cyber security certification vs degree: Which is best for your career?
- (ISC)2 launches free scheme to get 100,000 UK citizens into cyber security
- Stories from the front line: The secrets of the Red Team revealed
Subscribe
Rory Bathgate was Features and Multimedia Editor at ITPro until 2026, overseeing all in-depth content and case studies. He also co-hosted the ITPro Podcast with Jane McCallion, swapping a keyboard for a microphone to discuss the latest learnings with thought leaders from across the tech sector.
In his free time, Rory enjoys photography, video editing, and good science fiction. After graduating from the University of Kent with a BA in English and American Literature, Rory undertook an MA in Eighteenth-Century Studies at King’s College London. He joined ITPro in 2022 as a graduate, following four years in student journalism. You can contact Rory on LinkedIn.
-
PagerDuty wants to supercharge incident response with a new SRE agentNews The new Paige agent from PagerDuty will act as a digital assistant for teams battling incidents
-
Dejected devs lament career prospects amid AI advancesNews A new survey has found that AI is fundamentally changing the developer role and many are getting anxious
-
SPECIAL EDITION: Future-proofing the modern enterprise in an AI-centered worldSponsored podcast The Global Chief Technology Officer and Chief AI Officer of Dell Technologies, John Roese, discusses the Modern Enterprise Readiness Report and how businesses can close the execution gap.
-
Have agents, copilots, and chatbots made life harder?Podcast AI was meant to lighten the load and help workers carry out tasks without having to learn new skills – in reality, that's not quite what happened
-
What UK tech can learn from a decentralized governmentPodcast RSM head of technology industry, Ben Bilsland, talks to ITPro about the state of the UK's startup ecosystem
-
SPECIAL EDITION: TD SYNNEX talks about attaching services to productsSPONSORED PODCAST
-
SPECIAL EDITION: TD SYNNEX talks MSP Evolve™Sponsored podcast
-
The key to a successful IT strategyPodcast Exploring how IT leaders can implement change, lead by example, and deliver successful transformation projects
-
Why doesn't more data produce better results?ITPro Podcast Riverbed CIO Fernando Castanheira talks about data and how businesses can use it better
-
HPE Discover & Pure AcceleratePodcast Live from Las Vegas for HPE and Everpure's annual conferences