Protecting Data in Education Survey Report 2015 Contents

The Survey 2 Executive Summary 3 Survey Methodology and Respondents Profile 4 Key Findings 5 Appendix 1 - Participating Organisations 10 Appendix 2 - Full Survey Questions 13

Acknowledgements

The survey team at iGov Survey would like to take this opportunity to thank all of those who were kind enough to take part - and especially to those who found the time to offer additional insight through their extra comments. We would also like to thank our partner, Acronis, for their assistance in compiling the survey questions, scrutinising the responses and analysing the results.

Protecting Data in Education Survey Report 2015 © copyright Unless explicitly stated otherwise, all rights including those in copyright in the content of this publication are owned by or controlled for these purposes by iGov Survey.

Except as otherwise expressly permitted under copyright law or iGov Survey’s Terms of Use, the content of this publication are owned by or controlled may not be copied, reproduced, republished, downloaded, posted, broadcast or transmitted in any way without first obtaining iGov Survey’s written permission or that of the copyright owner.

To contact the iGov Survey team: Email: [email protected] Tel: 0845 094 8567

Protecting Data in Education 2015 The Survey

The protection of data is arguably more important now than ever before, with the amounts of data collected by organisations across the public sector still increasing, sometimes at a fairly rapid rate. Educational institutions are no different, with vast amounts of data collected on students, their background, progress and achievements, all of which must be kept and managed securely, efficiently, and cost-effectively.

In addition, migration to new, more efficient and cost-effective solutions such as virtualisation and cloud technologies can cause difficulties in the data management and back-up processes organisations currently have in place.

In light of this iGov, alongside our survey partner and data experts Acronis, have recently conducted a survey to examine the approaches educational institutions already take to protect their data, and how the growth in data and plans to migrate to new technologies are impacting these strategies.

About Acronis:

Founded in 2003, Acronis protects the data of over 5million consumers and 300,000 businesses in over 130 countries. More than 3000 education and scientific institutions.

Acronis offers world-class data protection designed to fit any business environment—from a single workstation to an entire enterprise infrastructure.

Protecting Data in Education 2015 Executive Summary

70% Have insufficient DR protection of their of respondents critical data*

48% Run both Virtual and Physical Systems in of respondents their Data Centre*

46% Would like to implement Cloud Data of respondents Protection Services**

Would like to 49% implement (Managed) Cloud Backup services of respondents as part of Cloud plans***

* “Complexity and Data Growth Driving Small and Medium-Sized Environments Toward a New Generation of Data Protection”, IDC, June 2014. Sample: 401 SMB Businesses, <1000 employees ** “Data Protection-as-a-service (DPaaS) Trends”, ESG, 2013 *** “2014 IT Budget Report”, SpiceWorks, 2014

Protecting Data in Education 2015 Survey Methodology and Respondents Profile

The survey was conducted online by iGov Survey between the 19th May 2015 and the 8th June 2015. The survey respondents represent a broad cross-section seniority levels, including managers, chief executives, headteachers and directors across the education sector.

361 individuals from 327 unique organisations participated in the survey. Organisations included those from primary schools, secondary schools, universities and colleges. The following diagrams show a breakdown of results by trust types and seniority.

3% BREAKDOWN OF RESPONDENTS BY TRUST TYPE 9% 19%

12% Primary Secondary Independent Colleges of FE University 19% Other 38%

BREAKDOWN OF RESPONDENTS BY SENIORITY

Assistant Head 27

Deputy Head 34

Director 20

Head 29

Headteacher/Principle 102

Manager 94

Other 38

Protecting Data in Education 2015 Key Findings

The biggest threat to organisations was cited as data loss (49%).

This was followed by data corruption and human error, both of which were highlighted by 17% of participants. Just 13% believed online hackers posed a significant threat.

4% WHAT IS THE BIGGEST PERCEIVED THREAT TO YOUR 13% ORGANISATION’S DATA?

Data Loss Data Corruption 17% 49% Human Error Online Hackers Other

17%

However, 70% of survey participants also told us they had tested their resilience to data loss, 65% had tested against data corruption, and 67% against the threat of human error. In contrast, less than half (46%) had tested their resilience to online hackers. Overall, 85% stated they had a disaster recovery plan in place to ensure the protection of their data.

UNDER YOUR CURRENT DATA SECURITY SOLUTION, HAS YOUR ORGANISATION RECENTLY TESTED ITS RESILIENCE TO MULTIPLE THREATS?

Yes No Don't know

100

75

50

25

0 Data Loss Data Corruption Human Error Online Hackers

Protecting Data in Education 2015 The vast majority of participants (87%) have seen the amount of data they produce increase in the past year.

Interestingly, over a third of this group (37%) stated that they had seen a rise of 11-20%. Furthermore, 63% believe this will continue at a steady pace in the coming years, while over a quarter (28%) believe it will begin to grow faster.

BY HOW MUCH HAVE YOU SEEN THE AMOUNT OF DATA YOU PRODUCE INCREASE?

103

73 73 Numberparticipantsof

11 11 10

Less than 5% 6-10% 11-20% 21-50% 51-74% More than 75%

When participants were asked how they stored their data, the most commonly used type of storage was hard drive (85%). Almost half (49%) also used Cloud storage, whilst 32% also stated they stored data externally through a supplier. Just 8% used CD, and a further 28% told us they used tape.

Protecting Data in Education 2015 Under half of survey participants (44%) told us they are currently planning a server migration or consolidation.

The same percentage of participants told us they were also considering migrating to the Cloud to store their data. Of this group, 40% said they hadn’t yet started the process of migration, whilst 13% stated they were less then 5% of the way through. In contrast, 15% believed they were almost complete, with more than 75% of the migration process done.

15% IS YOUR ORGANISATION CONSIDERING MOVING TO THE CLOUD TO STORE ITS DATA? 44% Yes No Don't know

41%

15% HOW FAR ARE YOU THROUGH THE MIGRATION?

4% We haven't started 40% Less than 5% 11% 6-20% 21-50% 51-74% More than 75% 17% 13%

Of those who were not migrating to the Cloud to store their data, the most commonly cited barrier was security concerns (56%). This was closely followed by the cost of storage (48%) and cultural resilience within organisations (34%).

Protecting Data in Education 2015 Over a third of participants (37%) stated they believed migration to virtualised or cloud environments would be very or fairly easy.

However, over a quarter (27%) believed migration would be fairly complex. Just 10% stated they had no plans to migrate to either virtualisation or cloud technologies. Furthermore, a third of participants believe their migration plans will impact their current back-up solution, with a further quarter (25%) unsure.

HOW EASY DO YOU EXPECT MIGRATION TO VIRTUALISATION AND/OR CLOUD TECHNOLOGY TO BE?

Very easy 11

Fairly easy 109

Fairly complex 86

Very complex 14

Don't know 62

We are not migrating 32

0 22 44 66 88 110

The vast majority of participants (99%) were also aware of their organisation’s obligation regarding data under the Data Protection Act and other information security legislation. A large proportion of this group (87%) also told us that this impacted the way in which they protect their data.

Protecting Data in Education 2015 82% of participants placed a ‘very high priority’ upon Data Security.

Just 15% placed a ‘high priority’ on data security, and only 3% placed a ‘medium priority’ on it. In regards to the back-up of data, almost three quarters (72%) gave it a ‘very high priority’, followed by 24% who stated it was a ‘high priority’.

In contrast, 57% placed a ‘very high priority’ on disaster recovery of data, a further 28% gave it a ‘high priority’, whilst 11% placed it as a ‘medium priority’ and 3% said it was a ‘low priority’.

PLEASE TELL US WHAT PRIORITY IS PLACED ON EACH OF THE FOLLOWING?

Very high priority High priority Medium priority Low priority Not a priority Don't know

100

75

50

25

0 Data security Back-up of data Disaster recovery

Protecting Data in Education 2015 Appendix 1 - Participating Organisations

Abbots Bromley School for Girls Central College Nottingham Abertay University Central Newcastle High School Aberystwyth University Chafyn Grove School Abingdon House School Chase Terrace Technology College Ackton Pastures Chaucer School Acresfield Community Primary School Chesswood Middle School Alcester Academy Childwall Sports and Science Academy Alderman Davies Church in Wales Primary School Christ Church Cathedral School Alderman White School Christopher Whitehead Language College Aldworth Science College City College Norwich All Saints Church of Primary School Coleg Gwent All Saints East Clevedon Church of England Primary Coleg Sir Gar School Colman Infant School Altrincham College of Arts Colne Community School and College Altrincham Grammar School for Girls Colonel Frank Seely School Anglia Ruskin University Coombe Boys' School Arboretum Primary School Craigie High School Armley Primary School Cranmore Preparatory School Arnold Academy Croydon College Arts University Bournemouth David Ross Education Trust Ashdell Preparatory School Dinton CofE Primary School Ashington Hirst Park Middle School Downe House Ashley Infant School Durham High School for Girls Aspire Education (Kilbirnie) Durham University Aston University Durrington High School Aurora Academies Trust Dyke House Sports and Technology College Ayrshire College Edinburgh Napier University Balnacraig School Ellesmere College Barking and Dagenham College Elmridge Primary School Barmston Village Primary School Farmor's School Barrow in Furness Sixth Form College Farnborough Road Junior School Barton Peveril College Farnham Heath End School Bashetc Farrowdale House School Belfast Boys' Model School Flegg High School Belfast Metropolitan College Forest Park Primary School Bethany School Forest School Bishop Burton College Foxwood Academy Bishop Challoner School Friesland School Bishop Stopford School Fulneck School Black Firs Primary School George Abbot School Blackheath High School George Pindar Community Sports College Blackpoolandthe Fylde College GEP Academies Boldon School Ghyllgrove Community Infant School Bracknell And Wokingham College Glan Usk Primary School Brentford School for Girls Glasgow Kelvin College Brentwood Preparatory School Glebe House School Brentwood Senior School Glenmoor School Brighton College Gosford Hill School Brimble Hill Special School Gracemount High School Bristol Grammar School Great Barford Lower School Broadwater School Greenfield School Brooke House College Greenwood Dale Foundation Trust Brookfields Special School Haileybury and Imperial Service College Brooklands College Hamilton Lodge School for Deaf Children Burbage Church of England Infant School Hammersmith Academy Burhill Community Infant School Hamp Academy Burnt Mill Academy Handale Primary School Caistor Yarborough School Handcross Park Preparatory School Camborne Science and Community College Hartlepool Sixth Form College Cambridge Judge Business School Harton Technology College Cambridge Meridian Academies Trust Haybridge High School and Sixth Form Camphill Rudolf Steiner Schools Heathfield School Campion School Helsby Hillside Primary School Cannon Park Primary School Henry Tyndale School Capel Manor College Herschel Grammar School Carnforth High School Castle Business and Enterprise College Highworth Warneford School

Protecting Data in Education 2015 Hodgson School Riston Church of England Voluntary Controlled Primary Hollygirt School School Hope Valley College Royal Russell School Horndean Infant School Rushey Mead School Huntcliff School Saint Brendan's Sixth Form College iMap Centre Saints Peter and Paul Catholic College Imperial College London Salisbury Cathedral School Institute of Education Sandside Lodge School John Masefield High School Sarum College John Ogilvie High School Scawthorpe Castle Hills Primary School Joseph Leckie Academy Selly Oak Trust School Kent Catholic Schools Partnership Sheffield Hallam University King Edward VI School Sheldon School King's College London Sherbourne Fields School Kingsmead Primary School Sir Joseph Williamson's Mathematical School Kingston University South West College Kirkham Grammar School Kirkwall Grammar School Springfields Academy Launceston College St Albans Girls' School Leeds College of Building St Anne's Catholic Primary School Lidget Green Primary SchoolandChildren's Centre St Augustine's Catholic Primary School Llantwit Major School St Dominic's Sixth Form College London School of Hygiene and Tropical Medicine St George's Church of England Academy, Newtown Long Furlong Primary School St George's School Longdean School St John Fisher Catholic Voluntary Academy Lord Williams's School St John's CofE Primary School Loudoun Academy St John's College Loughborough University St John's Marlborough Ludlow Church of England School St Joseph's Park Hill School Maesglas C.P. School St Joseph's School Maidstone Grammar School for Girls St Lawrence College Marlwood School St Mary and St John CofE VA Primary School Mayflower High School St Mary's Catholic Comprehensive School McLaren High School St Mary's Church of England Primary School Mid-Cheshire College St Mary's CofE Primary School St Mary's School Moss Hey Primary School St Paul's Girls' School Musselburgh Grammar School St Peter's Church of England Primary School Myerscough College St Richards Catholic College Netherthorpe School St Vincent's Catholic Primary School New Hall School Stanchester Academy Newman University Stanmore College Nightingale Primary School Stockton Riverside College North East Scotland College Stockton Sixth Form College North Nottinghamshire College Surbiton High School Northampton College Sutton Valence School Oaklands College Swanshurst School Oakley Infant School Sydenham School Oasis Academy Byron Tannery Drift School Oasis Community Learning TBAP Trust Ossett Academy and Sixth Form College Terrington Hall School Otley Primary School Testbourne Community School Park House School The Astley Cooper School Park View The Beacon School Parton Manor Infant School The Birches School Pilling St John's Church of England Voluntary Aided The Blue Coat School Primary School The Buchan School Plymouth Catholic and Anglican Schools Trust The Crossley Heath School (CAST) The Edinburgh Academy Plymouth University The Isle Of Wight College Preston School The John of Gaunt School Priory School The King Edmund School Q3 Academy The Lacon Childe School Queen Elizabeth Sixth Form College The Ladies' College Queen Mary University of London The Liverpool School of Tropical Medicine Radnage CofE Infant School The Marlborough Church of England School Rakegate Primary School The Moat School Red House Academy The Nicholas Hamond Academy Redborne Upper School and Community College The Oldershaw Academy Richard Taunton Sixth Form College The Pilgrims School Rickmansworth School The Royal College of Paediatrics and Child Health

Protecting Data in Education 2015 The Royal Veterinary College The Royal Wolverhampton School The Ryde School The Sixth Form College Colchester The Sutton Academy The White House School Thomas Deacon Academy Thornborough Infant School Thornton College Thorpe Hall School Tonbridge School Tor Bridge High Tower College Trafford College Trinity School Tudor Hall School Tunbridge Wells Girls' Grammar School Turnford School Turriff Academy UCAS University College London University of Aberdeen University of Bedfordshire University of Birmingham University of Greenwich University of Liverpool University of London University of the Highlands and Islands Uppingham CofE Primary School Upton House School Wales High School Walthamstow Hall Warren Wood Community School Warwickshire College Watford Grammar School for Boys Watford Grammar School for Girls Wellington School Wembdon St George's Church of England Primary School West Thames College Westholme School Westlands Community Primary School Westrop Primary School Wickford Junior School William Cassidi Church of England Aided Primary School Williamwood High School Willingdon Community School Willows High School Wimbledon High School Windlehurst School Windsor Park School Woodhouse College Worle Village School Worth Primary School Yeoford Community Primary School

Protecting Data in Education 2015 Appendix 2 - Full Survey Questions

Question: Does your organisation have a strategy for data management and security?

Answer Percent

Yes 90%

No 7%

Don’t Know 3%

Grid Question: Under your current data security solution, has your organisation recently tested its resilience to the following threats?

Data Loss Answer Percent

Yes 69%

No 21%

Don’t Know 10%

Data Corruption Answer Percent

Yes 63%

No 24%

Don’t Know 13%

Human Error, such as accidental deletion Answer Percent

Yes 66%

No 21%

Don’t Know 13%

Threats posed by online hackers Answer Percent

Yes 45.4%

No 33.8%

Don’t Know 20.8%

Protecting Data in Education 2015 Question: How is data currently stored? Please tick all that apply.

Answer Percent

Hard drive 39.9%

Cloud 23.1%

Tape 13.3%

CD 3.6%

Externally through supplier 14.5%

Other - please specify 5.6%

Question: As part of your strategy, do you currently have a disaster recovery plan to ensure the protection of your data should there be a problem?

Answer Percent

Yes 84%

No 6.9%

Don’t Know 9.1%

Question: What is the biggest perceived threat to your organisation's data?

Answer Percent

Data loss 49.7%

Data corruption 17.1%

Human error, such as accidental deletion 16.6%

Threats posted by online hackers 12.3%

Other - please specify 4.3%

Question: In the past year, have you seen the amount of data your organisation produces grow?

Answer Percent

Yes 86.8%

No 8.3%

Don’t Know 4.9%

Question: By how much has your data grown?

Answer Percent

Less than 5% 4.3%

6-10% 27.2%

11-20% 36.4%

21-50% 24.8%

51-74% 3.6%

More than 75% 3.6%

Protecting Data in Education 2015 Question: Do you expect your data growth to:

Answer Percent

Continue at a steady pace 62.7%

Grow faster 28.1%

Decline 1.2%

Stay the same 8%

Question: Are you currently planning any server migrations or consolidations?

Answer Percent

Yes 43.8%

No 44.4%

Don’t Know 11.7%

Question: Is your organisation considering moving to the Cloud to store its data?

Answer Percent

Yes 44.1%

No 41.4%

Don’t Know 14.5%

Question: How far are you through the migration?

Answer Percent

We haven't started the migration yet 39.9%

Less than 5% 12.6%

6-10% 7%

11-20% 9.8%

21-50% 11.2%

51-74% 4.2%

More than 75% 15.4%

Question: Are there any barriers to introducing Cloud storage in your organisation? Please tick all that apply.

Answer Percent

Security concerns 35.7%

Cost of storage 30.5%

Cultural resilience within our organisation 21.4%

Other - please specify 12.4%

Protecting Data in Education 2015 Question: Does your organisation use virtualisation technology?

Answer Percent

Yes 52.5%

No 21.3%

Don’t Know 26.2%

Question: Are you planning to in the future?

Answer Percent

Yes 20.3%

No 79.7%

Question: How easy do you expect the migration to virtualisation and/or cloud technology to be? Answer Percent

Very easy 3.4%

Fairly easy 33.6%

Fairly complex 26.5%

Very complex 4.3%

Don't know 19.1%

We're not migrating to either 9.9%

Other - please specify 3.1%

Question: Do you expect this to impact your current back-up solution?

Answer Percent

Yes 37.3%

No 37.7%

Don’t Know 25%

Question: Are you aware of your organisation's obligation regarding data under the Data Protection Act and other information security legislation? Answer Percent

Yes 98.5%

No 1.5%

Question: Does this impact the way in which you protect your data?

Answer Percent

Yes 87.3%

No 8%

Don’t Know 4.6%

Protecting Data in Education 2015 Grid Question: Please tell us what priority is placed on each of the following:

Data security Answer Percent

Very high priority 81.5%

High priority 15.1%

Medium priority 2.8%

Low priority 0%

Not a priority 0%

Don't know 0.6%

The back-up of data

Answer Percent

Very high priority 71.6%

High priority 24.4%

Medium priority 2.5%

Low priority 0.9%

Not a priority 0%

Don't know 0.6%

Disaster recovery of data

Answer Percent

Very high priority 56.5%

High priority 28.4%

Medium priority 10.5%

Low priority 2.8%

Not a priority 0.3%

Don't know 1.5%

Question: Are you interested in learning more about how to ensure your data is securely stored and managed? Answer Percent

Yes 41.4%

No 58.6%

Protecting Data in Education 2015