Describe the question the school needs answered
Begin with the affected school function and the uncertainty. Perhaps an assurance does not cover a separately hosted service, an exercise reveals an unclear response route or nobody can show what the last restoration demonstrated. Distinguish a missing record from evidence of a technical failure. Both may justify work, but they ask different questions.
Ask the current support team what it can resolve within the existing agreement. Where further expertise is needed, write the result the school wants in ordinary language. This brief is School Connection’s suggested commissioning method. It does not select a provider, endorse a service or replace the procurement and professional advice relevant to the school.
Agree authorised scope and how the teams will work together
Identify the services, sites and support relationships included. State exclusions, operating hours and any constraints around teaching, assessment or residential use. Agree which organisation can authorise access and work, how sensitive information will be handled and how changes to scope will be approved. Detailed credentials and technical access arrangements belong in protected records.
Name the school’s owner, the existing provider’s contact and the specialist’s coordinating role. Explain who shares findings, who makes operating decisions and who carries out a remedy. Additional expertise is most useful when it strengthens the existing service and leaves no important task between two contracts. Resolve responsibility before work begins.
Specify evidence that will support the next decision
Match the deliverable to the commission. An assessment should explain findings, priorities and limitations. Monitoring needs defined coverage and a route from a relevant alert to someone able to act. An incident investigation needs agreed authority, information handling and interpreted conclusions. A recovery exercise should distinguish what was restored from what was only discussed.
Ask for an intelligible leadership summary alongside the protected technical detail. It should explain the school consequence, uncertainty, recommended action and evidence required for closure. Agree how existing providers can examine and respond to findings. A report becomes more useful when the people implementing it can understand the next step and the school can identify the decision it must make.
Understand the continuing service and full commitment
Compare proposals against the same need and scope. Clarify included work, additional charges, support hours, response arrangements, school staff time and any dependency on another provider. For a continuing service, ask what happens during holidays, absence or disruption affecting the specialist itself. A monitoring subscription alone does not explain who makes the school’s decisions.
Examine relevant experience, capability and assurance in relation to the work proposed. A certificate or service description can inform the enquiry, but cannot establish that every local configuration or recovery process works. Record the reasons for the choice through the school’s applicable purchasing arrangements. The objective is a justified commitment with understandable responsibilities.
Agree acceptance and the next review before commissioning
Decide who will receive the findings, accept the deliverables and verify any corrective work. Record what evidence would justify closure and what would remain an open limitation. Establish how disagreement, an unexpected finding or a change in scope reaches someone authorised to decide. A completed visit or invoice is not automatically evidence that the intended improvement has been demonstrated.
Carry the agreed actions into the school’s existing review record, with owners and dates. Plan a proportionate check after implementation and revisit continuing support when services or needs change. The school should finish with a better understanding of its position, an appropriate route to action and evidence it can use at the next leadership discussion.
Prepare the working record
Use the editable CSV or the PDF pack with your colleagues. Record decisions and evidence references, keeping credentials, sensitive configurations and personal records in the school’s protected systems.
- School need
- Which school function and unresolved question justify the proposed work?
- Existing evidence
- What has already been checked, what does the current provider cover and what remains unknown?
- Intended result
- What answer, capability or demonstrated improvement should the commission deliver?
- Authorised scope
- Which services and sites are included or excluded, who can authorise the work and how will scope changes be agreed?
- Operating constraints
- Which teaching, assessment, residential, information-handling or access conditions must the work respect?
- Coordination
- Who represents the school, existing providers and specialist, and who resolves a responsibility gap?
- Deliverables and limitations
- Which leadership explanation and protected technical findings are required? How will exclusions and uncertainty be recorded?
- Continuing response
- For ongoing support, what coverage, hours, alert routing, absence and provider-disruption arrangements are agreed?
- Full commitment
- What charges, school time, implementation dependencies, continuing costs and exit arrangements need assessment?
- Acceptance and verification
- Who accepts delivery, what evidence is required and who checks that any remedy works?
- Unresolved decision
- Who decides when findings conflict or a material uncertainty remains?
- Next review
- Which action owners, dates and changes will bring the result or continuing service back for review?
The blank records are completed locally. They are not automatically submitted to School Connection and do not constitute a compliance certificate.
Official guidance and connected reading
- DfE cyber security core standard ↗
England guidance includes discussion with outsourced support and obtaining appropriate expertise. Apply the school’s own purchasing and governance arrangements.
- DfE Cyber Security Hub ↗
Official resources can help the school prepare its questions before commissioning additional work.
- Useful specialist work ↗
Our opening feature explains the different results an assessment, monitoring service, investigation or recovery exercise should make understandable.
- Use expertise to settle the remaining decision ↗
Our follow-up connects defined specialist work with existing providers and an accountable school decision.