Cyber security compliance assessment and readiness score

SWGfL’s free online safety self-review for schools. Voluntary, not an accreditation. KCSiE 2026 (para 179) names it as one way to do your annual online safety review. Add it if you want to work through it here.

• 13 plain-English questions
• Covers Leadership & Vision, Policies & Practices, Education & Curriculum +4 more
• Clear pass / at-risk verdict + priority fixes

Charity Commission safeguarding guidance and duties.

• 15 plain-English questions
• Covers Trustee Oversight, Policies, Safer Recruitment +7 more
• Clear pass / at-risk verdict + priority fixes

The online safety parts of the Department of Education's statutory Child Protection and Safeguarding in Education guidance (August 2026).

• 16 plain-English questions
• Covers Leadership and governance, Policies, Prevention and training +1 more
• Clear pass / at-risk verdict + priority fixes

Online safety across the nine quality standards, and the regulation 45 review.

• 14 plain-English questions
• Covers Protection of Children, Contact and Communications, Leadership and Management +2 more
• Clear pass / at-risk verdict + priority fixes

Data Security and Protection Toolkit for health & care organisations.

• 54 plain-English questions
• Covers User Accounts & Access Control, Devices Used for Work, Software Updates & Supported Systems +8 more
• Clear pass / at-risk verdict + priority fixes

Department for Education cyber security standards for schools and colleges.

• 28 plain-English questions
• Covers Cyber risk assessment, Cyber awareness plan, Anti-malware and firewall +4 more
• Clear pass / at-risk verdict + priority fixes

One of the six core digital and technology standards for schools and colleges in England (working towards by 2030): an SLT digital lead, registers, continuity plans and a digital technology strategy.

• 16 plain-English questions
• Covers SLT digital lead, Registers, Disaster recovery and business continuity +1 more
• Clear pass / at-risk verdict + priority fixes

DfE standards for school filtering and monitoring systems.

• 15 plain-English questions
• Covers Roles & Responsibilities, Annual Review, Filtering Provision +4 more
• Clear pass / at-risk verdict + priority fixes

A structured review of your GDPR practices: lawful basis, minimisation, consent, retention, breach response, subject rights and staff training. Ongoing obligation, not a certification.

• 19 plain-English questions
• Covers Lawful basis & purpose, Data minimisation & records, Consent & transparency +4 more
• Ongoing review: practices, next steps and recommended actions (no pass/fail score)

International standard for information security management.

• 30 plain-English questions
• Covers Information Security Policies, Organisation of Information Security, Human Resource Security +10 more
• Clear pass / at-risk verdict + priority fixes

Keeping Children Safe in Education statutory guidance.

• 24 plain-English questions
• Covers Policies & Procedures, Designated Safeguarding Lead, Staff Training +5 more
• Clear pass / at-risk verdict + priority fixes

The online safety and cyber security parts of the Welsh Government's statutory Keeping learners safe guidance, with the NCSC and Welsh Government cyber questions for governing bodies.

• 16 plain-English questions
• Covers Leadership and governance, Staff training and reporting, Filtering, monitoring and self-review +1 more
• Clear pass / at-risk verdict + priority fixes

National Youth Agency safeguarding standards.

• 16 plain-English questions
• Covers Policies & Procedures, Recruitment & Vetting, Training +7 more
• Clear pass / at-risk verdict + priority fixes

The online safety parts of the National Guidance for Child Protection in Scotland, the national internet safety action plan and the 2026 mobile phones guidance.

• 12 plain-English questions
• Covers Policy and leadership, Learning, Staff awareness +1 more
• Clear pass / at-risk verdict + priority fixes

Statutory counter-terrorism duty under the Counter-Terrorism and Security Act 2015, covering how extremist groups recruit through social media, gaming and messaging apps, and what staff do about it.

• 11 plain-English questions
• Covers Awareness and Training, Risk Assessment and Referral, Online and Digital Risks
• Clear pass / at-risk verdict + priority fixes

Best-practice recruitment processes to protect vulnerable people.

• 16 plain-English questions
• Covers Policy & Process, Role Design, Application & Shortlisting +5 more
• Clear pass / at-risk verdict + priority fixes

Multi-agency safeguarding guidance for children.

• 12 plain-English questions
• Covers Multi-Agency Working, Referrals, Information Sharing +5 more
• Clear pass / at-risk verdict + priority fixes