In this report, we bridge the gap between recently updated cyber security standards and pedagogical practice to make five specific recommendations aimed at reducing risk in the education sector.