Schools are a popular target for cyber attackers. This is partly due to the amount of staff, student and general learning information being held on the network, but also because the nature of education means that access to data is often allowed, either for continued research or to review coursework, for a period of time after students leave. Security best practice is a challenge in this environment, but recent rapid changes have provided an excellent opportunity to review these practices for the coming year.