Heads have been told to read government guidance on cyber attacks to avoid being targeted by Russian “hacktivists”.
An email sent by the Department for Education to school leaders today says that all public sector organisations should reconsider their risks if using Russian-based antivirus software or IT applications.
The email acknowledges that it is “highly unlikely” that most will be targeted unless they are linked to Ukraine or Russia, or if, for some reason, it could be considered a PR win for the Kremlin if they were compromised.
But the email adds: “Consideration should be given to the possibility of Russian companies being subject to sanctions, which would prevent the updating of their products, such as antivirus software.”
The cyber attack risk from Russia
Heads have also been told to read advice on cyber threats and “hacktivism” from the government-run National Cyber Security Centre (NCSC).
NCSC guidance released last week says that organisations may choose to remove Russian products and services proactively.
It adds: “Alternatively, you may choose to live with the risk. Whatever you choose, remember that cyber security, even in a time of global unrest, remains a balance of different risks.”
Last week headteachers were advised to consider ending energy deals with Russian suppliers.
Many schools and local authorities have contracts with Russian energy giant Gazprom, and in an email to school leaders, the DfE pointed to Cabinet Office guidance to public bodies, which states that they should identify any contracts where the “prime contractor” is a Russian or Belarusian supplier and “consider terminating that contract”.
