“It’s a case of if not when” for schools and trusts to be the recipients of a successful cyber attack. And that is what is