E42SP_1: Building a safety culture in educational institutions

In educational institutions, digital security is no longer just a technical issue but a key element of a responsible and safe school environment. Building a security culture means creating a shared awareness and behaviors that contribute to the protection of personal data, digital infrastructure, and the privacy of all participants—students, teachers, and administrative staff.

A security culture is not based solely on policies and IT systems but also on education, open communication, and everyday habits. When all members of the educational community understand their role in maintaining digital security, the school or university becomes more resilient to threats, and students and teachers can focus safely and freely on the learning and teaching process.

Exercises for participants on developing a security culture:

recognising phishing messages,
Security Awareness Quiz,
assessing the cybersecurity maturity of the organisation.

The goal of these exercises is to develop skills in recognising security threats and to become familiar with good practices in cybersecurity.

1. Recognising Phishing Messages

Open the prepared external source with examples of phishing messages provided in the task link.
Review and study the examples, then indicate for each whether it is a phishing message or not (e.g., incorrect URL, spelling errors, urgent requests, suspicious attachments).
Finally, create a short list of features that help you recognise phishing.

2. Security Awareness Quiz (Moodle)

Carefully read each question and answer based on the knowledge and materials from previous exercises.
After completing the quiz, check your results and note any questions you answered incorrectly for further study.