In a recent episode of the Cloud Design Box podcast, Martin Byford-Rew, Head of Digital Systems at King Edward VI Foundation, discusses the importance of multi-factor authentication (MFA) in schools and the strategies that institutions can use for successful implementation.

MFA offers significant advantages in educational settings.

By introducing an additional security layer, MFA safeguards against unauthorised access, even if a password has been breached.

The rise of cyber threats in education is alarming. And with schools now managing more sensitive digital information than ever before, cyberattacks pose risks to student addresses, financial details, staff information and other personal data tied to HR, Finance and other departments.

Schools must elevate their cybersecurity strategies beyond weak passwords and outdated practices.

Meet Martin Byford-Rew

Martin has extensive experience in education technology, previously working as a Microsoft 365 trainer and consultant. He has collaborated with Cloud Design Box on several SharePoint intranet projects, helping schools and multi academy trusts (MATs) build secure and efficient digital systems.

Now, as Head of Digital Systems at King Edward VI Foundation, Martin is leading the implementation of robust cybersecurity measures in schools.

What is Mutli Factor Authentication (MFA) for schools?

MFA serves as a digital barrier against harmful cyberattacks. Users must log into a system with two or more verification factors, such as emails or accounts.

Many of these additional verification factors, such as receiving a taxt code on your phone after entering your password or using Face ID to unlock your phone, are likely familiar to you. You might have also encountered similar verification requests during payments through your banking app. This familiarity can help ease the transition to MFA.

Make Multi Factor Authentication (MFA) work for schools

While the prospect of rolling out MFA across a school or MAT may seem daunting, Martin shares practical strategies to make the transition smoother.

His insights show that the process is manageable and beneficial for the school’s security:

Prioritise staff accounts first

MFA should be rolled out across staff accounts first, then explore ways to extend MFA to students where possible.

“It’s not optional for staff, because there’s such sensitive data that teaching staff have access to. You’ve got to be so careful, because obviously, if any of that stuff leaks out, it’s really, really bad,” explains Martin.

Other tools worth a mention

Authenticator apps – Use trusted authenticator apps, such as Microsoft Authenticator, Google Authenticator for a secure and easy-to-use option.

Hardware security keys – Ideal for staff who need a highly secure, phishing-resistant method.

SMS or email codes – These are common but less secure than other MFA options.

Schools can’t afford to ignore MFA – so what’s next?

As cyber threats advance, schools must adapt.

Contact our team of Microsoft 365 experts today to talk about making Microsoft 365 more secure.  

Watch the full podcast for expert insights on implementing MFA in schools. 

Support the show