[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-355429-105":53,"doc-detail-355429-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","june-data-protection-newsletter-20-june-2022-cyber-security-and-disaster-recovery","June Data Protection Newsletter - June 20, 2022 - Cyber Security and Disaster Recovery","","June’s Data Protection Newsletter highlights items the Data Protection team has seen, or expects schools to encounter, with focus on cyber security risk during summer activity and guidance to reduce exposure to attempted attacks. It outlines common threat patterns (rogue calls, emails, credential capture, ransomware, internal misuse, and USB malware) and practical prevention strategies such as verification steps, updates, multi-factor authentication, access control, link checking, and routine, tested backups. It also provides a concise refresher on disaster recovery/business recovery/incident response planning, including key systems and roles and steps to restore normal operations after disruption.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/june-data-protection-newsletter-20-june-2022-cyber-security-and-disaster-recovery/355429/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/june-data-protection-newsletter-20-june-2022-cyber-security-and-disaster-recovery/355429.png","ImageObject",442,249,{"name":88,"@type":89},"Jacob","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-17","2026-09-22",true,{"@type":98,"interactionType":99,"userInteractionCount":9},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"为什么夏季会增加学校遭遇网络攻击的可能性？","Question",{"text":108,"@type":109},"分析显示，夏季往往会出现针对学校的网络攻击尝试增加，可能与暑期阶段对外沟通活动增多有关，例如与考试机构、地方政府、新学校以及工作推荐相关的事务。","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"文中建议如何降低网络攻击风险？",{"text":113,"@type":109},"建议包括：通过其他渠道核实联系方式或银行账户变更、及时安装系统安全更新、在MIS和系统上启用多因素认证、管理并在必要时撤销访问权限、限制存储设备并定期备份且测试备份可用性，同时核验邮件链接并避免被第三方邮件的时间压力催促。",{"name":115,"@type":106,"acceptedAnswer":116},"灾难恢复/业务恢复/事件响应计划需要关注哪些关键内容？",{"text":117,"@type":109},"计划应明确关键系统与关键人员，并识别这些系统与人员可能出现的问题；随后制定“出事后如何恢复到正常”的具体步骤（如关闭攻击者访问、评估损害、沟通影响并从备份恢复），并列出可协助恢复的支持方，如IT团队、MIS供应商与DPO等。","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},355429,1792209978,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":9,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":76,"language":135,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":61,"update_tm":139,"read_time":9},962084931830,"https://ap-avatar.wpscdn.com/davatar_a8503ba1806abce46bf441b54a3ca4cd","| June Data Protection Newsletter\u003Cbr>20th June 2022\u003Cbr>(5 Articles) | |\n| --- | --- |\n\nThe aim of this newsletter is to highlight some items which the Data Protection team have noticed schools have been or may soon be encountering.  \n1. Cyber Security  \nRecent analysis has shown that the summer months often bring an increase in attempted cyber-attacks aimed at schools, potentially due to concentrating on tasks which involve an increase in communication with third parties such as exam boards, local authorities, new schools, and job references.  \nTherefore, we thought it would be a great time to remind everyone of some potential cyber attack and how to prevent them.  \nPotential Cyber Attacks  \nExternal  \n• Rogue Phone Calls: e.g., a phone call from someone pretending to be from the cleaning organisation and asking for their bank account details to be changed.  \n• Rogue Emails: e.g., a disguised address pretending to be an auditor asking for contact details of parents. They then email the parents asking to pay money for a school trip.  \n• Obtaining Email Login details: e.g., asking someone to input their details via a hyperlink or web portal, then taking control of the email account to send further phishing emails or inserting a message into a future email exchange and asking for bank details to be changed.  \n• Ransomware e.g., asking someone to click on a hyperlink or download an attachment which causes malware to lockdown the shared drive until a payment is made.  \nInternal:  \n• Obtaining login details via post its e.g., pupil uses the login details to access the MIS and then change academic results.  \n• Rogue Staff e.g., member of staff who was suspended and facing disciplinary logging into the system remotely and deleting CCTV footage.  \n• USB Devices: e.g., a member of staff brings in a USB device from home which contains malware which then attacks the system when it is connected to the computer.  \nStrategies to minimise risk  \n1. Confirm any changes in contact or bank account details through another medium e.g., phone call  \n2. Install System Security Updates immediately when they arrive.  \n3. Set up Multi factor authentication on your MIS and System.  \n4. Know what staff has access to what systems and areas and then ensure that access is changed or revoked when required. This can be tracked using a Joiner, Mover, Leaver Form (template available) .  \n5. Block removal storage devices using your antivirus e.g., Sophos Intercept X.  \n6. Ensure staff have strong different passwords for different systems which are periodically changed. Staff’s memories can be assisted via password managers. Confirm these rules in your ICT User Agreement.  \n7. Check any links in emails by hovering over them and not clicking on it, see if the landing page looks legitimate  \n8. Reduce the information your present online, change job descriptions for key roles e.g., Finance, IT. So, they cannot be specifically targeted  \n9. Take your time and don’t be rushed with emails from third parties which include strict time pressures  \n10. Backup your key system regularly: and ensure that all new systems and areas are included, so you an restore after an attack.  \n11. Test your backups, working out how to do it, and that it is working/can be used.  \n12. Physically protecting the server rack in a lockable area so it can’t be accessed.  \n13. When system updates occur, ensure that they have not turned off other auto update functions e, g, antivirus  \n14. Change Default passwords such as the WiFi  \n2.  Disaster Recovery Plan  \nAlmost as if the DfE were clued into the fact Cyber Attacks may be on the rise, they have recently updated their guidance on Disaster Recovery Plans.  \n“What is a Disaster Recovery/Business Recovery/Incident Response Plan?” is a question that the DPOs receive relatively often, therefore we thought it would be a great idea to give a brief reminder. Please also check out the DfE guidance as well.  \nOne can use the “say what you see” approach w","cbCaiu7qft5Io4d0","https://ap.wps.com/l/cbCaiu7qft5Io4d0","pdf",165763,"English","# Cyber Security\n## Potential Cyber Attacks\n## Strategies to minimise risk\n# Disaster Recovery Plan\n## Key questions for planning\n## Cyber attack response\n# Covid Test Result Retention","[{\"question\":\"为什么夏季会增加学校遭遇网络攻击的可能性？\",\"answer\":\"分析显示，夏季往往会出现针对学校的网络攻击尝试增加，可能与暑期阶段对外沟通活动增多有关，例如与考试机构、地方政府、新学校以及工作推荐相关的事务。\"},{\"question\":\"文中建议如何降低网络攻击风险？\",\"answer\":\"建议包括：通过其他渠道核实联系方式或银行账户变更、及时安装系统安全更新、在MIS和系统上启用多因素认证、管理并在必要时撤销访问权限、限制存储设备并定期备份且测试备份可用性，同时核验邮件链接并避免被第三方邮件的时间压力催促。\"},{\"question\":\"灾难恢复/业务恢复/事件响应计划需要关注哪些关键内容？\",\"answer\":\"计划应明确关键系统与关键人员，并识别这些系统与人员可能出现的问题；随后制定“出事后如何恢复到正常”的具体步骤（如关闭攻击者访问、评估损害、沟通影响并从备份恢复），并列出可协助恢复的支持方，如IT团队、MIS供应商与DPO等。\"}]","June Data Protection Newsletter - June 20, 2022 - Cyber Security and Disaster Recovery | PDF",1790118799]