Information and communication technologies are currently an integral part of society and human lives. It can be said that population is in an information age, which is characterized by a large amount of information and its sources. New communication channels and platforms are also emerging, which ensure the transfer of the required information between individual users or elements. In connection with the development of the field of information and communication technologies there is also an increase in various threats and attacks. However, cyber threats and attacks are targeted not only at organizations and institutions, but also at individual users of computer or mobile devices. Visiting inappropriate websites that are not intended for the appropriate age group of people increases the possibility of a cyber attack or infiltration of a computer virus into the user's device. Most adolescents also did not go through an educational process aimed at expanding their knowledge of safe behavior on the Internet. Adolescent users can then be attacked both at home and in an educational institution. ICT security education for pupils and teachers should be part of the teaching process in primary and secondary schools. School institutions should primarily lead pupils in this area to greater responsibility and prudence on the Internet and the use of ICT. The approach and education in the field of cyber security, led the author of this paper to a area that focuses on risk analysis and determining the level of security of educational institutions. The main aim of the research is to identify and assess the risks of a selected secondary school and to express possible impacts on educational processes. The partial aims of the work are mainly the characteristics of the selected secondary school and its information environment. This process include data collection through a questionnaire survey, risk assessment and analysis of potential impacts of cyber threats on the pedagogical processes of the school. Based on the obtained results, a discussion and conclusion is then conducted in order to outline the possible future development of this area.