On this page
Login safety#
This year, we’re focusing on one of the most effective ways to protect your systems and data: securing how you log in.
Why it matters: cyber threat landscape#
Cyber threats targeting New Zealand’s education sector are on the rise.
Cyber incidents#
In the year to June 2024, 7,122 cyber incidents were recorded across New Zealand, resulting in $21.6 million in reported losses. Many of these affected small to medium organisations, including schools.
Weak passwords#
Weak passwords and lack of two-factor authentication (2FA) are common entry points for attackers, leading to account takeovers, data breaches, and financial loss.
Targeted organisations#
Schools are among the most targeted organisations, as the education sector tops the most targeted industry according to several reports.
These numbers show that no school is too small to be targeted. Simple changes can make a big difference.
Smarter logins: strong passphrases + two-factor authentication#
Encourage all staff to use strong, unique passphrases and enable two-factor authentication (2FA) on their accounts. These simple steps are among the most effective ways to prevent cyber incidents in schools.
It should already be on any admin or super admin accounts that can access personal information and will soon be mandatory on Google Workspace. We strongly recommend all staff turning on 2FA to protect young people’s data.
Implementing 2FA on staff accounts:
- blocks phishing and brute-force attacks
- protects sensitive student and staff data
- reduces the risk of ransomware and account compromise.
What is two-factor authentication – Own Your Online – YouTube
Webinars for school leaders: security know-how#
We know it’s a busy time of year so we’ve made it easy to access recorded webinars so you can watch when it’s convenient for you. The webinars feature expert advice tailored for the education sector.
Google session#
The Google Workspace session covers:
- why login security matters for schools
- how to implement 2FA and passphrase policies
- demonstration on how to configure and manage the policies to make it suit your school.
Cyber Security Week 2 Step Verification 2025 – YouTube
Microsoft session#
The Microsoft session covers:
- Securing your Microsoft 365 – split into ‘do now’, ‘plan for’ and ‘investigate’ stages to help schools prioritise
- Securing devices and securing on premise infrastructure
- Practical steps boards can take to support school-wide cyber resilience.
Being cyber smart with your community#
Build on cyber smart week, with your community by letting them know about these upcoming webinars.
Webinars for parents#
Online safety – summer re-set
With summer around the corner, now is the perfect time to think about supporting online safety and wellbeing over the long holiday period.
Join Netsafe for a practical and supportive webinar designed for parents and caregivers. We’ll explore simple and effective ways to keep tamariki and rangatahi safe online, from managing screen time to navigating gaming and group chats. This session will equip you with tips and tools to feel confident guiding your whānau.
Wednesday 12th November at 7:00pm
What teens really say about being online
Join Netsafe’s Karla Sanders as she shares insights from her recent roadshow with almost 200 rangatahi around the motu, facilitating youth workshops to better understand what young people are doing online.
Too often, there is an assumption that all teens are using the same platforms in the same ways, or that their experiences are predictable based on gender or age. The roadshow was designed to test this and to surface a more complex and accurate picture of how young people spend their time online.
Tuesday 18th November at 7:00pm
- Issue 10 of Education Gazette 202513 October 2025
- Kia Manawaroa Issue 9 out now10 October 2025
- Matavai Issue 7 out now10 October 2025
- Government response to the Poutasi Review9 October 2025
