Programme Introduction
Jointly organised by the Digital Policy Office (DPO), Hong Kong Internet Registration Corporation Limited (HKIRC), and ISACA China Hong Kong Chapter, the "Cybersecurity Staff Awareness Recognition Scheme 2026/27" is now officially open for applications!
To bolster cybersecurity awareness within the academic community, a brand-new "Education Sector" category has been introduced this year, covering primary schools, secondary schools, universities, and other higher education institutions. Fully supporting this initiative, Hong Kong Education City warmly invites all members to actively participate in building a safer digital campus environment together.
Key Dates
From now until 14 August 2026: Application & Submission of Supporting Documents
September to October 2026: Assessment & Confirmation of Recognition Levels
Q4 2026: Award Ceremony
Assessment Criteria for the Education Sector
Educational institutions meeting the designated number of the following criteria will be awarded different levels of recognition:
Cybersecurity Training for Staff: Provided online or physical cybersecurity training to at least 50% of staff in the past 12 months.
Cybersecurity Training for Students: Provided online or physical cybersecurity training to at least 50% of students in the past 12 months.
Phishing Drill or Education for Staff: Ensured staff participated in at least one phishing drill in the past 12 months, or disseminated phishing-related educational information to staff.
Phishing Drill or Education for Students: Ensured students participated in at least one phishing drill in the past 12 months, or disseminated phishing-related educational information to students.
Comprehensive Cybersecurity Policy Framework: Formulated and maintained accessible cybersecurity policies (e.g., remote work policies, AI usage guidelines, and incident response guidelines) for all staff.
Clear Reporting Mechanism: Established effective reporting channels for staff and students to report cybersecurity issues promptly, including a dedicated channel for reporting suspicious or malicious emails.
Recognition Levels
Diamond: Achieved "Platinum" requirements for two consecutive years
Platinum: Fulfilled all 6 assessment criteria
Gold: Fulfilled any 4 assessment criteria
Silver: Fulfilled any 3 assessment criteria
Bronze: Fulfilled any 2 assessment criteria
🎁 Recognised institutions will be invited to the Award Ceremony, receive a physical trophy and a digital logo of their respective recognition level, and be listed on the official website.
Application Details
Fee: Free of charge (Government-funded programme)
Eligibility: All local educational institutions (including primary, secondary, universities, and higher education institutions)
Method: Submit the online electronic form
Official Website: https://cyberhub.hk/en/recognition-scheme
Contact & Enquiries
Tel: 2319 3851
Email: cybersec@hkirc.hk