When school systems fail, the first question is what pupils and staff can still do

01

Digital resilience is experienced through ordinary school work

A school’s digital estate can look well governed when viewed through contracts, devices and training records. The more revealing question is what happens when a critical service becomes unavailable: can staff establish who is present, reach the right parent, obtain essential information and coordinate the next decision? For a boarding school, the same question extends beyond the teaching day.127

The October publication of DfE’s Data (Use and Access) Act checklist is a useful point to examine that connection. The collection is written primarily for maintained schools and academies and says independent schools may find it useful. Independent leaders should therefore identify the underlying legal duties and relevant recommendations rather than treating every public-sector instruction or support arrangement as their own.127

02

A system list needs a consequence beside each entry

NCSC’s school-governance questions connect knowledge of IT providers and critical services with backup and restoration. The document is intended to begin a strategic conversation, not to act as a compliance checklist. Its relevance is that school leadership needs an intelligible account of what digital dependencies mean for the school’s operation.3

Our assessment is that an information-asset list becomes more useful when each essential service has a named operational owner, a tolerable interruption and a workable contingency. This is not a claim that all information should be copied into parallel paper files. Any contingency must itself protect the data and remain usable. The decision is which capability the school must preserve, who needs access and how the information remains sufficiently current.3

03

Recovery is a test of sequence as well as technology

A successful technical restoration may still leave staff unable to work if identity services, communication or access permissions are missing. Leaders should therefore ask for a recovery sequence expressed in school terms. What returns first, who checks that it works, and how do staff know which records they can rely on? The answer needs the people responsible for the service as well as those restoring the technology.4

NCSC’s Exercise in a Box provides a structured way to rehearse incident decisions and record follow-up work. A school can adapt a relevant exercise to include senior leadership, IT, communication and operational teams. The result should be an account of dependencies exposed and decisions improved, rather than a certificate of attendance or an assertion that a discussion proves the school could withstand any incident.4

04

AI governance belongs in the same account of information use

DfE’s AI guidance asks settings to consider benefits and risks for a specified use, with appropriate safeguards and attention to unauthorised activity. Its data-protection guidance also treats transparency and assessment as part of planned use. A general announcement that a school “uses AI” says little about whether a particular activity is appropriate.56

The useful questions are concrete. Is the activity preparing a general resource, handling personal information, generating a communication or influencing a consequential decision? Who checks the output? What is recorded about the tool and its permitted use? These are School Connection’s organising questions. They help distinguish a drafting task with limited consequences from a use that needs stronger scrutiny. They are not evidence that all AI use has the same risk or benefit.56

05

Connect information rights with the systems that deliver them

The October checklist brings together areas including complaints, automated decisions, privacy information and children’s data. For an independent school, the practical task is to trace the relevant processing through its actual systems and responsibilities. A corrected privacy notice is only one part of that work if the staff receiving requests or the provider holding records cannot support the process described.1

A hypothetical example illustrates the connection. An admissions team adopts a tool to summarise application material. Before use, leadership should understand what information enters it, what happens to that information and how the output affects the process. If the summary is inaccurate, who can identify the problem and alter the consequential decision? The school needs an answer tied to this use, rather than an AI policy written at a level that never reaches the application.1

06

The governing evidence should be usable by people outside IT

Boards do not need to reproduce technical administration. They do need evidence they can interrogate: the essential services, the significant dependencies, the last meaningful recovery test, the unresolved issues and the person accountable for resolving them. Technical and operational teams should be able to challenge each other’s assumptions without turning the discussion into a procurement presentation.

This connects all six systems. Digital choices affect educational continuity, inclusion and safeguarding, staff capacity, finances and the physical environment in which systems operate. The leadership judgement is whether the arrangements preserve the school’s ability to fulfil its purpose when circumstances change. That judgement should be revisited when the evidence changes, rather than renewed automatically because the policy review date has arrived.

Leadership questions

Questions that turn the development into a governing conversation.

What we are monitoring next

Publication is the beginning of the watch.

• Follow current regulator guidance, material system changes and evidence from real recovery tests or incidents.
• Revisit the assessment when a school changes provider, introduces a consequential AI use or identifies a contingency that cannot deliver its intended function.

Continue the evidence trail

Read across the historical record

• A parent’s data complaint can cross the whole school: the June change independent leaders need to understand ↗

The continuing record

How the record develops

• PHP exploitation reports change the question behind an independent school’s all-clear ↗

  Adds a concrete, subsequent software-security development to the 14 October information-governance and continuity discussion, with an explicit boundary between vulnerability, exposure and a verified school incident.

• The Teachers’ Pensions handover reaches the school payroll desk ↗

  Applies the earlier service-continuity question to the people, permissions and records supporting an actual pension-administration handover.