Start with responsibility, not technology
The most common cause of inconsistency is not capability. It is that different schools assume different people are responsible. Record responsibility first, then assess.
A review structure that travels between schools
Use the same sections everywhere so results can be compared honestly.
- Leadership and responsibility
- Connectivity and infrastructure
- Device provision and refresh
- Identity, access and offboarding
- Cyber resilience and backup
- Filtering and monitoring review activity
- Staff capability and training
- Supplier and support arrangements
Turn findings into owned work
A review that produces a rating and no actions changes nothing. Every finding below your expected level should produce a named owner, a date and a definition of the evidence that will close it.
An honest caveat
A structured review helps a trust understand and improve its position. It does not certify that any school meets a national standard, and it is not a substitute for professional technical or legal advice.
General guidance only. It does not constitute legal, regulatory, safeguarding or data protection advice, and it does not describe any real trust or school.