A brief overview for staff invited to a cultural audit conversation
Introduction
Thank you for being so willing to participate in the cultural audit conversation on behalf of your organisation.
Secure Schools has been asked to conduct a Cyber Security Audit to increase your organisation's cyber resilience. You have been nominated to participate in some of the audit conversations as someone whose opinion would make a valuable contribution to this process.
So that you know, the part you would play requires no preparation. There are no trick questions or questions you wouldn’t be able to answer - your understanding and opinion are all we ask for. Your views will help Secure Schools gain a deeper understanding of how technology is used in your day-to-day tasks and will ultimately help your organisation protect itself from cyber threats. We have compiled some FAQs below to help reduce any anxieties or worries. If you have any specific questions for our team, please don’t hesitate to email help@secureschools.com
FAQ
Who is Secure Schools?
Secure Schools is a team of cyber security specialists and educationalists—you can find out more about us on our website. We provide cybersecurity services to the Education sector, including this Cybersecurity Internal Audit—a fully supportive, positive process that helps schools and trusts own their cybersecurity risks and improve resilience.
Why have I been asked to participate in the audit conversation?
Your organisation has been asked to give Secure Schools contact details for a selection of professionals: a member of the organisation's staff (office, administration, teaching, etc.), a member of the SLT or management team, and a member of the Governing Body. This is to gain insight from a wide range of views, which are collated to enhance the effectiveness of the audit.
What is meant by the “Cultural” part of the audit?
Your organisation will have completed a Self-Evaluation Form (SEF) as part of the auditing process. The cultural part of the audit seeks to understand where answers to the SEF complement or contrast real-world workplace practice. This helps establish how schools can better support their staff in achieving cybersecurity objectives.
Do I have to have completed, or even see, the Self Evaluation Form (SEF)?
No - the cultural conversations are purposefully separate to gain the most value from the process.
Would you like me to do any pre-reading before my call?
No - you will be asked to respond to the best of your ability, and questions are focused on your current use of technologies daily. There is no expectation of prior knowledge.
Will my contribution be confidential?
Yes – the conversations we need to represent your understanding and experience accurately. Information is collated to form an overall impression and is not attributed to individuals by name.
How long will it take?
As a former Teacher and member of SLT, I know and appreciate that you are under pressure. Therefore, we aim to keep conversations short while allowing sufficient time to get the most out of the audit. We ask for around 15 minutes for staff based within schools and up to 30 minutes for board members.
How and where will the conversations take place?
All conversations will take place using video conferencing software—the joining details will be included when you book the conversation with our team. If a video call is not possible for any reason, a phone call can be arranged—please let us know if this is the case and provide a contact number so we can call you instead.
What if there are technical difficulties or I am no longer available on the day?
Please call the Secure Schools team at the earliest opportunity on our office number -
01638 438186 - to let us know you’re due to attend an audit conversation and which organisation (school or trust) you are calling from so that our team can support you in connecting to the right auditor as soon as possible.
We understand that emergencies can and do happen - if you cannot attend at the last minute, we cannot promise rescheduling. Please do try to attend so that we can ensure good coverage across roles for the benefit of the final report. The sooner you let our team know, the more likely we can arrange to speak to an alternative staff member.
Finally, I would like to thank you again for your help and contribution to the cultural part of the audit. Your views and experiences are important and valuable to protecting your organisation from cyber threats.
Please feel free to ask questions anytime during the conversation if you are unsure or want clarification.
We look forward to speaking with you soon!
Paul Armstrong
Senior Cultural Auditor at Secure Schools