Schools face a variety of cyber security threats that require regular updates to systems, reviews of risks, and maintaining good security settings. This can be hard to prioritise, especially with limited budgets. The Ministry’s The Cyber Assistant Tool, or simply ‘CAT’, can help.
Imagine the impact on a school community when sensitive data – names, grades, and medical information – is stolen in a cyberattack. Recent events, such as the PowerSchool data breach affecting over 18,000 educational institutions in the United States, highlight how vulnerable schools are to these increasingly sophisticated threats. Shockingly, this breach exploited the absence of a basic security measure: Multi-Factor Authentication (MFA).
While this attack happened overseas, New Zealand schools are not immune. With our growing reliance on digital platforms for administration, communication, and learning, our local schools and kura face similar risks. A successful breach could expose sensitive information, disrupt operations, and quickly erode trust within a school’s community.
Unfortunately, it’s not a matter of if there will be a cyber-attack, but when. The actions and controls you put in place will make a significant difference to how big and how long (impact and severity) the incident goes on for. Addressing these vulnerabilities requires a proactive and ongoing approach to cyber security.
Two cyber initiatives
To support schools in this effort, the Ministry of Education is taking a comprehensive approach to improve cyber resilience, including two specific initiatives: Safer Technologies for Schools (ST4S) and the Cyber Assistant Tool. With the ST4S initiative, schools can confidently select digital products that meet rigorous security and privacy standards, as we detailed in our previous Interface article. Complementing this, the Ministry is also piloting the Cyber Assistant Tool (CAT), which enables schools to evaluate and strengthen their overall cyber security posture.
Combined, these initiatives offer practical solutions that empower principals with additional tools and indirectly equip boards with new insights to support their strategic oversight. These initiatives collectively enable principals to identify areas for improvement in cyber maturity and provide trusted insights on digital products, helping them make informed decisions and ensure a safer online environment for students and staff.
This article focuses on the CAT tool, which helps you see what you have in place and what simple things will build a safer digital environment for students, staff, and whānau.
What is the Cyber Assistant Tool?
The Cyber Assistant Tool, or simply ‘CAT’, is an innovative self-assessment tool tailored for New Zealand schools and kura, currently under pilot with 100+ schools around the country.
Think of CAT as a personalised cyber coach for your school. It offers:
- Coverage of the spectrum of digital issues in cyber safety, security and privacy in 11 easy modules split across three key areas: governance, technology controls, and staff, students, & whānau (covering communications, training and processes). These modules enable schools to assess their cyber security, cyber safety, and online privacy practices.
- Personalised action plans: based on a school’s specific responses, the CAT generates a prioritised list of actions to strengthen cyber resilience.
- Flexibility: schools can choose to complete one module at a time or tackle all 11, depending on their needs and resources.
The CAT empowers schools to proactively manage risks, rather than waiting to respond to incidents. By providing clear, practical steps, it makes cyber security achievable, even for schools with limited IT expertise.
CAT pilot results are positive
Early feedback from pilot schools has been encouraging. Most respondents found CAT easy to navigate, with a well-balanced number of questions and an intuitive, user-friendly interface. Every participant rated the tool as either relevant or very relevant to their school’s needs.
One enthusiastic school leader shared: “I love this tool! Cyber security is a huge area, but the modules break it down well. Prioritising follow-up actions with supporting resources is incredibly useful.”
With such a strong start, CAT is already proving to be a valuable resource in helping schools strengthen their cyber resilience.
Five reasons to get started with CAT
Understanding the importance of a proactive approach to cyber security is only the first step. Schools that adopt CAT gain access to a tool designed not just to identify vulnerabilities but to empower actionable change. CAT’s comprehensive yet accessible structure ensures that even schools with limited IT expertise can take meaningful steps to enhance their digital safety.
By adopting CAT, schools are not only improving their internal systems but also setting a precedent for best practices across the education sector. Here’s why CAT makes sense for your school:
- Tailored insights: CAT delivers customised action plans, so schools can focus on their most pressing vulnerabilities.
- Proactive risk management: by identifying risks early, schools can prevent incidents before they occur.
- Time savings: CAT simplifies complex cyber risk assessments, saving valuable time for principals and IT staff.
- Improved governance: the tool supports boards and trustees in fulfilling their oversight responsibilities.
- Community trust: by demonstrating a commitment to digital safety, schools can build confidence among parents and whānau.
Practical steps to begin your CAT journey
CAT offers schools the opportunity to take tangible, practical steps toward improving their digital resilience. One critical focus area highlighted by recent cyber incidents is the implementation of Multi-Factor Authentication (MFA). CAT helps schools assess their current systems and identifies whether this basic but essential defence is in place. Schools that actively engage with CAT find that it demystifies cyber security, breaking it down into manageable steps tailored to their specific needs.
By starting small – perhaps with just one or two modules – schools can build momentum and confidence in their approach to cyber safety. Each completed module provides valuable insights that not only enhance immediate practices but also lays the groundwork for a comprehensive ‘cyber resilience’ culture within each school / kura. This step-by-step process ensures progress is steady, achievable, and impactful.
Getting started with CAT is straightforward – simply email the Ministry’s Digital Services team (digital.services@education.govt.nz) with your ESL login username, asking to be added to the Pilot, then:
- Log In: use your Education Sector Logon to access the CAT platform.
- Choose modules: select the modules most relevant to your school’s immediate needs.
- Complete assessments: work through each module with input from relevant staff members – modules typically take about 10 minutes each to complete.
- Review your action plan: use the personalised recommendations to guide your next steps.
- Engage the board: share insights and proposed actions with trustees to ensure alignment with governance priorities.
For additional support, schools can join workshops or consult the Ministry’s digital team.
What’s next for CAT in 2025?
CAT remains in its pilot phase, and the Ministry is actively seeking further schools to participate. By joining the pilot, schools can contribute valuable feedback to refine the tool and shape its future development. Schools participating in the CAT pilot are encouraged to provide feedback, ensuring the tool remains relevant and effective.
Call to Action: build your cyber confidence
The digital landscape is changing rapidly, but schools don’t have to navigate these challenges alone. By using the Cyber Assistant Tool, you can take control of your school’s cyber security, ensuring a safer environment for students and staff.
Don’t wait for a breach to take action. Start your school’s CAT journey today to stay ahead of potential threats. Access CAT today and unlock the power of personalised cyber resilience.
Together, we can build a stronger, safer digital future for our schools and kura.
Learn more and access CAT here.
INTERFACE February 2025