Schools, Children and Cybersecurity

As an IT and Cybersecurity consultant I know first hand how some of the biggest vulnerabilities to our networks are quite often not technological but human.

Humans, by nature, are flawed and unfortunately this can make us easy prey for those who want our data or our money.

Or both.

In my role as a safeguarding school governor, ensuring children and young people are safe is both my priority and my passion.

I know that if you start talking to even the youngest children about the ways in which they can be tricked online, they can be much better prepared for a world of scams, false promises and deep fakes.

This extends to teachers too, reassuring them that we are all human and prone to mistakes and that being scammed can happen to anyone, it allows far more open, honest conversations to take place.

Conversations that are better for everyone in the long run*.

To sum up, by addressing common, human psychological biases, proper cyber education can help us make better decisions and adopt safer online habits.

This is something which, when embedded into our culture from age five upwards, can lead to some great outcomes.

The Mental Shortcuts That Lead Us Astray

Psychological biases are like mental shortcuts our brains use to make decisions quickly.

While useful in our day to day lives, these shortcuts can sometimes lead us astray.

In the world of cybersecurity, some of these biases make us more vulnerable to threats.

For instance, ‘optimism bias’ is the tendency to believe that bad things are more likely to happen to others than to ourselves.

This can lead to complacency and skipping precautionary measures.

Early cyber education can help students develop a more realistic understanding of risks, reducing the impact of optimism bias.

The Power of Critical Thinking

Another common bias is ‘confirmation bias’, where we favour information that confirms our pre-existing beliefs while ignoring anything that contradicts them.

Cyber education can teach critical thinking skills, encouraging students to question assumptions and seek out diverse perspectives, which is crucial for spotting and tackling cyber threats.

Similarly, the ‘availability heuristic’ makes us overestimate the likelihood of events based on how easily examples come to mind.

For instance, if someone hears about a data breach, they might overestimate the risk of it happening to them.

Cyber education can provide a balanced view of risks, helping students understand the actual likelihood of various threats.

Building Mental Resilience

By educating students about common cyber threats and how they exploit psychological biases, cyber education raises awareness and helps individuals recognise and counteract these biases.

It often involves problem-solving and scenario-based learning, which can enhance critical thinking skills.

This helps students evaluate information more effectively and make informed decisions.

Understanding psychological biases and how they can be exploited by cyber attackers helps build mental resilience.

Students learn to approach online interactions with a healthy level of scepticism and caution.

The Importance of a 'No-Fear' Approach

A key aspect of effective cyber education is creating an environment where students feel supported rather than fearful.

Encouraging open discussions about mistakes – and what we can all learn from them – can reduce the stigma around cybersecurity errors and promote continuous improvement.

This supportive non-judgemental culture is crucial (and not just for cyber education!).

When students feel safe, they're more likely to ask questions and participate in discussions, leading to deeper understanding and better learning outcomes.

A ‘no-fear’ approach encourages students to take risks and think creatively without worrying about making mistakes.

It also fosters innovation and problem-solving skills.

Students who learn in a supportive environment are more confident in their abilities and more likely to engage with challenging material.

Benefits Beyond School

The benefits of cyber education don't just stop when students leave school.

Adults who received cyber education as children are more likely to practise good cybersecurity hygiene, such as using strong passwords and recognising phishing attempts.

With the growing demand for cybersecurity professionals, having a solid foundation in cybersecurity can open up career opportunities and make individuals more attractive to employers.

And, of course, the critical thinking skills developed through cyber education can be applied to various aspects of life, helping adults make better decisions and solve problems more effectively.

Businesses also reap the rewards of a workforce educated in cybersecurity.

Employees with cybersecurity training are better equipped to recognise and respond to threats, reducing the likelihood of successful cyber-attacks.

Knowledgeable employees are more likely to adhere to security protocols and regulations, helping businesses avoid fines and legal issues.

Companies that prioritise cybersecurity education can build trust with customers and partners, enhancing their reputation and competitive edge.

Preventing cyber-attacks can save businesses significant amounts of money that would otherwise be spent on recovery and damage control.

The Rewards and Risks of AI

While AI offers significant advantages in cybersecurity, it also introduces new risks.

AI systems can sometimes misidentify threats, either flagging benign activities as malicious (false positives) or missing actual threats (false negatives).

This can lead to unnecessary disruptions or overlooked vulnerabilities.

Over-reliance on AI can lead to complacency among security teams, who might neglect traditional security practices and human oversight.

Cybercriminals can exploit AI systems by feeding them misleading data, causing them to make incorrect decisions.

This can be particularly dangerous in a school setting where sensitive student data is at risk.

AI's integration into cybersecurity and education brings both opportunities and challenges.

AI can personalise learning experiences, helping students learn at their own pace and according to their individual needs.

However, schools, which often have limited resources and outdated IT infrastructures, can become prime targets for cyber-attacks.

AI can both help and hinder these efforts, depending on how well it is implemented and monitored.

Teachers, staff, and students need training on how to use AI responsibly and understand its limitations.

This includes recognising potential biases and ensuring ethical use.

Companies like KnowBe4 (I have no affiliation) offer a variety of free resources that can be invaluable for implementing cybersecurity education in schools.

KnowBe4's Children's Cybersecurity Kit includes training modules, games, and activities designed to teach children valuable online safety and security skills.

By utilising these resources, schools can create a robust cybersecurity education programme that prepares students to navigate the digital world safely and responsibly.

I'm a cybersecurity specialist who also knows the challenges schools face in this area.

Proper cybersecurity education and practices combined with open, no-fear conversations will go a long way in making the world a safer place.

Now – and in whatever future is in store.

*Check out what happened to world-renowned architecture firm Arup when an employee was too scared to fess up to being conned.

Find out more about Jo's work and Evolve-IT here.

Jo Starsmeare