Schools IT Checklist/Audit 2025

Name

First Name

Last Name

Phone

Core Areas

Broadband & Connectivity

What type of broadband connection does your school use?

What is your contracted maximum speed

What is your average download speed?

Do you have backup connectivity in place?

Notes

Section Buttons

Wi-Fi Infrastructure

Do you have full Wi-Fi coverage across your site?

Are there separate WI-FI networks in place for School users and Guest Users?

Is there a BYOD Wi-Fi available for staff and/or student owned devices?

Do guests or students have a free to use WIFI?

What Wi-Fi standard is predominantly used?

Notes

Section Buttons

Cyber Security

Is there a managed Antivirus solution installed on all school managed devices?

Is there a managed Ransomware Encryption Protection solution installed on all school managed devices?

Does the School have a Password Policy

Notes

Is a firewall in place and regularly maintained?

Is MFA required for all staff systems?

Do you have an incident response plan that’s tested annually?

Do you have a patch management policy

Is there a named individual and official policy to ensure completion?

Notes

Section Buttons

Filtering & Safeguarding

Is age-appropriate filtering implemented?

What is the filtering

Are logs of internet usage monitored?

How and what software is used to log and back up and how long are the logs stored for?

Are all users identified by the filtering solution?

Are filtering policies reviewed regularly?

is there a named individual and official policy to ensure completion?

Does the School perform regular penetration testing

Can alerts be sent to the safeguarding team for keyword triggers?

Notes

Section Buttons

Do policies reflect KCSIE and Prevent duty?

Yes

Data Protection & GDPR

Do you have a written data protection policy and how often is it reviewed?

Do you have a named Data Protection Officer?

Is your MIS data stored securely (e.g. encrypted/cloud)?

Where?

What software is used?

is there a named individual and official policy to ensure completion?

Are privacy notices regularly updated?

Is GDPR training provided to staff?

Notes

Section Buttons

Device Management

What MDM vendor do you use?

Are school devices centrally managed via MDM or policy?

Is a device inventory maintained?

Is your student-to-device ratio 1:1?

Can lost or stolen devices be tracked or remotely wiped?

Notes

Section Buttons

Cloud Storage & Backup

Are backups stored in the cloud?

Are data access permissions reviewed regularly?

What cloud platforms are in use?

Are local backups stored

Dedicated Backup Appliance

Local USB

Local NAS

Other

Are critical files backed up offsite or in the cloud?

OffSite

On premis

Not backed up

Are Cloud backups immutable?

Does the school have a 3-2-1 backup policy in place (The 3-2-1 backup policy is a data protection strategy that involves keeping three copies of your data, storing them on two different types of media, and keeping one copy offsite)?

Is your Microsoft 365/Google Workspace tenancy backed up?

Is there a named individual and official policy to ensure completion?

Are backups checked and tested regularly?

Notes

Section Buttons

Critical Enablers

Staff Cyber Awareness & Training

Is annual cyber security training provided to all staff?

Are phishing simulations or awareness activities conducted?

Are training records or attendance logs maintained?

Is there a named individual and official policy to ensure completion

Notes

Section Buttons

Access Controls & Authentication

Is Multi-Factor Authentication (MFA) required for all staff accounts?

Are role-based access controls in place (e.g. RBAC)?

Are administrator accounts separately tracked and reviewed?

Notes

Section Buttons

Software Licensing & Compliance

Are all software licences up to date and cover all systems/devices?

Is there a named individual and official policy to ensure completion?

Software audits

Notes

Section Buttons

Visitor Access & BYOD

Is a guest Wi-Fi network available and separate from core systems?

Is there a documented BYOD policy?

Are personal devices authorised and monitored if allowed?

Notes

Section Buttons

Incident Response & Breach Readiness

Is there a formal incident response policy?

Are roles and responsibilities clearly assigned?

Has the incident response plan been tested in the last 12 months?

Notes

Section Buttons

Growth & Innovation Areas

Classroom Technology

Are Interactive screens or large displays used in classrooms?

Are classroom devices and laptops regularly updated or replaced?

Are the laptops or classroom devices provided to teachers current and fit for purpose?

Are teacher workstations and mobile devices adequate for delivering digital learning?

do you have any old or obsolete Windows devices

Notes

Section Buttons

Accessibility & Inclusion

Are assistive technologies available for SEND students?

Do digital materials follow accessibility guidelines (e.g. WCAG)?

Is staff training provided on inclusive and accessible tech?

Notes

Section Buttons

Digital Literacy & E-Safety

Is digital literacy part of the formal curriculum?

Are pupils taught about digital citizenship and online safety?

Are parents involved through awareness sessions or materials?

Notes

Section Buttons

Sustainability & Environmental Impact

Are energy-efficient devices prioritised in procurement?

Are old devices recycled or disposed of responsibly?

Has your school reviewed server/cloud setup for energy use?

Notes

Section Buttons

Upon submission, you will receive an email with a copy of the completed form

If you are human, leave this field blank.