School Cybersecurity Checklist

Schools store some of the most sensitive personal data in any community — children's records, health information, family financial data, and staff personal details. Yet cybersecurity is consistently underprioritised in African schools, making them vulnerable to data breaches, ransomware, and account takeovers. This checklist helps school administrators implement practical, low-cost security measures that protect student and staff data without requiring a technical IT team. It covers access control, password security, device management, and vendor security standards.

For: School headteachers, ICT coordinators, system administrators, and bursars responsible for school data security in institutions using cloud-based or on-premise school management software. · When: Complete this checklist during initial system setup and review it at the start of every new academic year. Also run through it immediately after any suspected security incident or after a staff member leaves the school.