With increases in technological usage, cyber incidents are also on the rise and have become a major concern in schools across the globe. What is of significant concern is that cyber incidents in South African schools are also on the rise. Existing evidence suggests that, in South Africa there are no clear procedures that are consistently followed by schools on how to report cyber incidents. The aim of this research is therefore to propose cyber incident handling procedures to enhance the effectiveness in handling cyber incidents as well as ensuring that each role player has an important contribution in the intervention process that is designed to reduce cyber incidents in South African schools. The study also assessed the perception of learners on cyber incidents in South Africa. Using the literature review approach and thematic analysis of the data collected from learners the study highlighted the procedures and roles of role players that can assist in cyber incident handling in South African schools. The study also came up with a detailed analysis of the views of learners on cyber incidents in South Africa. The results presented can help to provide a framework that will act as a guide on reporting cyber incidents and directing school management, and all within the school, towards appropriate reporting procedures and intervention processes. The study also found out that the rise in cyber incidents in South African schools, if left unaddressed, can have a devastating effect on learners. Therefore, the government of South Africa, through the Department of Basic Education, must prioritize the handling of cyber incidents in schools as cyber incidents are now a threat to the efficient and effective execution of the mandate of the department.