This session is aimed at Trustees, Governors and school senior leaders with responsibility for IT in their school or Trust. It is also appropriate for technical leads who need to understand the information senior leaders need and how they can provide assurance upward. We will discuss the impact of a ransomware incident at FCAT, lessons learnt and the key questions school leaders should be asking technical leads (or MSPs and service providers) on a regular basis to gain assurance that systems are being managed in a secure manner. We will also look at how the DfE Cyber Security Digital Standard, Cyber Essentials and the CIS framework can be used to provide a roadmap to improving cyber security and developing an informed response to Board level questions on the security of your systems.