KCSIE 2023 - updates that may impact IT

[Ditto]

Just a couple of days ago the latest Keeping Children Safe in Education update arrived. There are updates around monitoring and web-filtering and in 144 it states

In addition, schools and colleges should consider meeting the Cyber security standards for schools and colleges.

[Scifigirl]

likely more to come but shout out to netsupport

 

https://schoolsweek.co.uk/new-schools-safeguarding-guidance-emphasises-online-safety-duties/

Edited June 8, 2023 by Scifigirl

[DavR]

For info, this doesn't come into force until September 2023. No harm in being prepared though, of course!

 

Interesting that those cybersecurity standards sound very familiar to the ones some of our colleagues consulted with the DfE on. I wonder if they're the same ones?

Edited June 8, 2023 by DavR

[localzuk]

With DSLs needing to have working knowledge of the filtering and monitoring stuff, it has raised the question here - if we start sending them the notifications of monitoring hits, how do we then handle the need for those DSLs to go and look at some of the sites that get flagged? Some of the sites and searches are easy to figure out, but others? They just get a URL and no context (other than a general category) from Smoothwall, for example.

[Scifigirl]

Or does it raise the issue of having a qualified DSL on the IT staff.and paid to manage that... Just to pass stuff on.

90% of the hits we get for students are sites that will be accessible to staff anyway. Netsupport is pretty good at taking screenshots, unless they are really really quick.

[Ditto]

103. says "The designated safeguarding lead should take lead responsibility for safeguarding and child protection (including online safety and understanding the filtering and monitoring systems and processes in place). This should be explicit in the role holder’s job description.", which is going to a big step for some DSL's. Ultimately it's going to need a fair bit of collaborative working, so it might be best where this currently sits with IT, a conversation is started with the DSLs.

[localzuk]

For info, this doesn't come into force until September 2023. No harm in being prepared though, of course!

 

Whilst it doesn't come into effect until Sept, as 6 weeks of that time is summer holiday, it actually only leaves us 6 weeks to adapt policies, procedures and get training sorted. Not really a lot of time at all!

[Kitkatninja]

...Interesting that those cybersecurity standards sound very familiar to the ones some of our colleagues consulted with the DfE on. I wonder if they're the same ones?

 

Yes it is

[mrbios]

With DSLs needing to have working knowledge of the filtering and monitoring stuff, it has raised the question here - if we start sending them the notifications of monitoring hits, how do we then handle the need for those DSLs to go and look at some of the sites that get flagged? Some of the sites and searches are easy to figure out, but others? They just get a URL and no context (other than a general category) from Smoothwall, for example.

 

I think I'm achieving this with Senso.

Senso flags keywords and phrase detections, and then anything flagged as "Urgent" or "Critical" emails the DSL and he reviews the event which has a corresponding screenshot. Presumably the screenshot covers the needs of the KCSIE without the DSL needing to review an actual website, as they have a screenshot?

 

Actually had an incident the other day where a class were doing something where they had to talk about a subject for 60 seconds, and one girl for example was doing "rape culture" which obviously meant tons of hits to the senso keyword lists. The DSL got so many hits he went to the room and talked to the teacher, the student overheard, and was surprised by the whole thing....but her response was "that actually makes me feel really safe" which i thought was amazing. So wonderful to see the system working as intended, and a student feel protected by it.

 

Only downside is, that monitoring isn't in any way connected to filtering really...

[mavhc]

Surely you can choose to for Senso to also block the website if it contains the bad words

[LeMarchand]

Working my way through this and fell at the second hurdle! Is a backup line a bit like a retainer in that you pay a small amount and then stump up if you have to use it, or are you basically doubling your cost?

[localzuk]

Working my way through this and fell at the second hurdle! Is a backup line a bit like a retainer in that you pay a small amount and then stump up if you have to use it, or are you basically doubling your cost?

Depends how you implement it. We have a backup FTTC line here, for example. But, the idea of a backup line only really works if it is routed differently in my view.

 

If your main and backup lines are from the same ISP, using the same tech, one going down will likely mean the other going down too.

[FN-GM]

Depends how you implement it. We have a backup FTTC line here, for example. But, the idea of a backup line only really works if it is routed differently in my view.

 

If your main and backup lines are from the same ISP, using the same tech, one going down will likely mean the other going down too.

 

I agree with that statement. Have a completely seperate line with another carrier and setup BGP so all you public IP addresses move if it fails over.

[LeMarchand]

Yep, a separate line was my thinking, but I'm trying to get some idea of the extra cost.

[localzuk]

Yep, a separate line was my thinking, but I'm trying to get some idea of the extra cost.

It depends on what you want - if you just put a second identical line in, with a different ISP, you'll basically double your costs. If you go with a lower spec tech (eg. an FTTP line instead of leased line) you will pay considerably less usually.

[RumTechie]

Whilst I'd love to believe DSLs would buy in to a collaborative approach to filtering and the whole concept of being involved with the process, in my experience, all they want to receive is alerts on relevant categories/hits so they can process them and deal as necessary.

 

I get the idea of having someone in IT as a DSL but personally, I'm not sure I'd want to know about the types of things DSLs get to see.

Edited June 13, 2023 by RumTechie

[mavhc]

It's on a computer, thus is it the job of IT, right?

 

(or it's a device with >1 button)

[LeMarchand]

The third hurdle is also a bit of a PITA.

 

How to meet the standard

You should talk to your supplier or in-house support

team to ensure that you have a content filtering

system in place which meets the requirements

outlined in the online safety section of keeping

children safe in education, paragraphs 123-135

 

Those paragraphs don't seem to be the right ones, unless I'm looking at the wrong document.

Edited June 13, 2023 by LeMarchand

[timbo343]

I was sent the following link with the updates to the KCSIE.

 

https://www.tes.com/magazine/analysis/general/kcsie-2023-24-safeguarding-key-changes-schools-need-know

 

KCSIE Sept 2023: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/1161273/Keeping_children_safe_in_education_2023_-_statutory_guidance_for_schools_and_colleges.pdf

 

2. Filtering and monitoring

 

Three notable changes come in the form of new instructions and recommendations regarding online filtering and monitoring software used by schools to keep tabs on what sites pupils are visiting or trying to visit.

 

Paragraph 103 on page 28 contains new text making it clear that the designated safeguarding lead (DSL) has responsibility for “understanding the filtering and monitoring systems and processes in place” as part of their remit.

 

Paragraph 124 on page 32 expressly notes that “an understanding of the expectations, applicable roles and responsibilities in relation to filtering and monitoring” should be included in safeguarding and child protection training at induction for all staff.

 

Paragraph 138 on page 36 says a school’s child protection policy should include how appropriate filtering and monitoring technology on school devices and school networks form part of its work in this area.

 

These changes are in response, in part, to work done by Judy and Andy Thomas to raise awareness of the importance of this technology in schools after their daughter, Frankie, died by suicide having accessed inappropriate material because the school’s filtering and monitoring software had stopped working and no one realised this was taking place.

 

Ramsden says that while “it is good that schools bear this in mind” as something they need to be doing, most schools will have systems in place - but DSLs should “go through their safeguarding policies yet again this summer” in response to these new additions.

 

If anyone wants a spreadsheet of the new standards (why this is important has been stripped out), i've got a document here which you can access and take a copy of: Education Cyber Standards - June 2023

Edited June 13, 2023 by timbo343

[LeMarchand]

KCSIE Sept 2023: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/1161273/Keeping_children_safe_in_education_2023_-_statutory_guidance_for_schools_and_colleges.pdf

 

I've got that, but 123 and the next few don't seem relevant.

 

123. In addition to the child protection file, the designated safeguarding lead should

also consider if it would be appropriate to share any information with the new school or

college in advance of a child leaving. For example, information that would allow the new

school or college to continue supporting children who have had a social worker and been

victims of abuse, or those who are currently receiving support through the ‘Channel’

programme and can have that support in place for when the child arrives. More

information on the child protection file is in Annex C.

 

Thanks for the other links, though!

[mavhc]

If only some kind of system to link to other documents existed on the world wide web, alas

[titch]

I was sent the following link with the updates to the KCSIE.

 

https://www.tes.com/magazine/analysis/general/kcsie-2023-24-safeguarding-key-changes-schools-need-know

 

KCSIE Sept 2023: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/1161273/Keeping_children_safe_in_education_2023_-_statutory_guidance_for_schools_and_colleges.pdf

 

 

 

If anyone wants a spreadsheet of the new standards (why this is important has been stripped out), i've got a document here which you can access and take a copy of: Education Cyber Standards - June 2023

 

Thanks for this. Just wondering where this document came from as would like to point to who created it as I may well use it soon.

 

Thanks

[timbo343]

Thanks for this. Just wondering where this document came from as would like to point to who created it as I may well use it soon.

 

Thanks

Which document are we talking about?

 

If it's the spreadsheet, i built it the other night (monday 12th June evening).

 

The other documents came from my headteacher.

[titch]

Thanks for doing that. Super helpful. Will you be adding the KCSIE stuff to your lovely spreadhseet?

[timbo343]

Thanks for doing that. Super helpful. Will you be adding the KCSIE stuff to your lovely spreadhseet?

 

To be fair, i'm glad it's helped someone else.

 

If someone was to highlight what was needed to be included then i would compile a spreadsheet