ISO 27001 & ISMS

[DJ_MonkeyBoy]

I am interested in learning whether schools, particularly multi-academy trusts (MATs), implement any type of information security management system (ISMS). Given the increasing number of cyberattacks on schools and the importance of effective security measures, I am curious to know:

 

Do any schools have effective ISMSs in place?

How do senior management view ISMSs, if at all?

What percentage of the schools budget do schools allocate to protecting their infrastructure?

 

Given the sensitive nature of the data that schools collect, it seems essential that they implement effective ISMSs and achieve ISO 27001 accreditation. However, in my experience, this area of implementation is often lacking.

 

Let me know your thoughts