Scott Slocombe, our Deputy CTO of PSP IT leading our Agile provision for Education, as well as the Chair of Governors for a large primary academy in Bourne, is a member of the IT Management Board for a Lincolnshire Multi-Academy Trust. 

1. Do we have a clearly defined role for filtering and monitoring and provide assurance to the LGB or Trustee boards?

Scott: “One of the biggest requirements that came out of the DfE’s filtering and monitoring standards last year was the requirement to have a senior leader who has a clearly defined role concerning filtering and monitoring. They should work closely with the IT team to ensure your filtering and monitoring systems meet your safeguarding needs, your policies and procedures are aligned and all staff are aware.
They should take responsibility for filtering and monitoring reports, safeguarding concerns and provide assurance to the board that the filtering and monitoring systems are fit for purpose.” 

2. Do we review our filtering and monitoring provision annually?

Scott: “Although best practice, it is now explicitly highlighted within the filtering and monitoring standard and KCSIE. 
The review process should cover a wide range of criteria, such as the risk profile of your pupils, what your systems blocks (and why), outside safeguarding concerns, the policies you have in place and how you handle safeguarding concerns.” 

You can find review templates on the KCSIE site.

3. Does our filtering and monitoring block harmful content, without impacting teaching and learning?

Scott: “Are you confident that your filtering and monitoring systems protect children, not impacting their learning?
The DfE says that SLTs, IT staff and the DSL should establish “appropriate levels” of filtering and monitoring. A key issue to address is that you are not affecting your admin teams performing their roles, and your students can still learn how to assess and manage risk independently.”

4. Are we blocking proxies and VPNs which help circumvent our filtering?

Scott: “There are ways to block common filtering bypass methods and services that hide IP addresses, such as VPNs and Proxies. When connecting to the school network via one of these, your pupil’s device usage can go unmonitored.
You must have technology in place that blocks access to your network via VPNs and proxies.”

5. How do we test and record the effectiveness of our filtering and monitoring?

Scott: “Setting up filtering and monitoring is one thing, but you must be able to prove you frequently test the effectiveness of your systems. During inspections fulfilled by OFSTED or ISI, they want evidence and assurance that you have carried out these tests and recorded their results effectively.”

6. Has our safeguarding policy been updated to reflect: our device monitoring strategy, and the owner of the process?

Scott: "Who is responsible for ensuring your filtering and monitoring has been effectively applied to all devices on your network? This also includes any personal devices which staff and pupils use as part of your BYOD (Bring Your Own Device) policy.
Alongside your DSL and IT staff, the SLT must incorporate your online safety processes and the owner of your filtering and monitoring with your overall safeguarding policy. This ensures comprehensive protection of students from online risks and potential harm, as outlined in KCSIE 2023.”

7. Do we meet the requirements for identifying the 4Cs?

Scott: “KCSIE groups online risks into four areas: content, contact, conduct and commerce. These are also known as the ‘four Cs of online safety’.
By using the 4C’s as a framework, schools, colleges and DSLs can ensure they have the systems and processes in place to help their students stay safe online.”

You can read more about the 4Cs of online safety here.

8. What is our strategy for effective device monitoring?

Scott: “KCSIE makes it abundantly clear that the effectiveness of filtering and monitoring of all devices is required for keeping children staff and pupils safe online. The senior leader responsible for filtering and monitoring must ensure that this extends to the use of personal devices and visitors using your network.
Would you be able to see if children are typing in to google a question asking how they get help? Similar to a disclosure to a member of staff, which would lead to a safeguarding concern being raised?” 

9. Are our staff adequately trained on online safety? Do they understand their role concerning online safety?

Scott: “The KCSIE guidance states that all staff should receive appropriate safeguarding and child protection training, including online safety. As part of their training, they should understand their roles and responsibilities with filtering and monitoring.” 

10. Does filtering achieve our prevent duty?

Scott: “Although not new in the KCSIE 2023, it is an important question to ask and be able to assure the board. However you could argue this has been expanded under the monitoring requirement, which goes beyond filtering content and web browser searches, but in chat messages, documents, and possible pictures shared outside of the school’s filtering on-school platforms.”