Assess the whole school setup, not just a speed label
A school internet review needs to look beyond a speed label. Assess four connected but distinct layers: the broadband connection, the internal network, filtering and monitoring, and cyber incident readiness. A strong answer on one layer does not settle the questions raised by the others.
Start with the school’s actual use. Which online resources need to be reachable during the busiest parts of the day? How much work relies on cloud services? What does the school need its filtering and monitoring to address, and who would coordinate a response to a cyber incident? These questions give you a practical route through the assessment without treating one speed figure or feature as proof of overall suitability.
Connection performance matters in a school because many users may access the internet at the same time. Check whether common online resources remain reachable when the connection is busy at peak times of the school day.
Filtering and monitoring need to be considered in the context of students, technology use and safeguarding policies. Cyber incident readiness is a separate question: it concerns school oversight, response planning and how responsibilities are handed over to an IT provider. Keep those workstreams visible alongside connectivity.
Check connection performance during busy school periods
Peak-time access is a useful test of school broadband because schools often have many people accessing the internet simultaneously. A connection that appears adequate when lightly used may still need to be assessed under the busier conditions of the school day. Focus on the practical question: can your school reach common online resources when the system is busy?
Make the assessment specific to the resources and periods that matter to your school. If staff and students rely on online materials at the same time, include that kind of demand in the discussion with your provider. Ask how the connection’s performance is assessed at peak times, and what information supports the answer. Keep the response tied to busy-period access rather than accepting a general speed label as a substitute.
Use these prompts to keep the conversation concrete:
- Which common online resources does the school need to access during busy periods?
- When in the school day do simultaneous users place the greatest demands on the connection?
- How will you assess whether those resources remain reachable when the system is busy?
Record the answer and any open question separately. That gives you a clear basis for follow-up without inventing a universal speed target. The relevant check is the connection’s ability to support your school’s peak-time access needs, not whether a quoted figure sounds high in isolation.
Consider upload needs and cloud-service dependencies
Upload performance deserves attention alongside download performance, particularly when your school uses cloud-based services. Download describes data coming to the school; upload describes data sent from it. Asking about both helps you discuss the direction of use that matters for the school’s activities rather than focusing on a single headline measure.
List the cloud-based services the school uses and discuss how staff and students rely on them. Then ask for information about upload as well as download performance in the context of that use. Avoid turning the answer into a universal speed requirement: the assessment should reflect the school’s services and how they are used.
Cloud planning also involves more than the connection itself. Department for Education guidance says schools and colleges should know how to use or move to cloud solutions, including how they manage access, availability, data protection and backup. Bring those topics into the same review as connectivity, but keep them as distinct questions: a discussion about broadband performance does not, by itself, answer how cloud access or data is managed.
A practical record can pair each cloud service with the school’s use of it, the relevant upload and download questions, and any access, availability, data protection or backup issue that still needs an answer. Use it to make a focused list of questions for the people responsible for the school’s network and cloud arrangements.
Assess backup connectivity as a separate resilience choice
Backup broadband is a separate decision from assessing the primary connection. At Gigabit IQ, we recommend that schools have backup broadband connections using different technologies from their primary connections. This is Gigabit IQ’s recommendation, not a universal requirement or a guarantee that a backup arrangement will meet a particular school’s needs.
If you are considering backup, identify what the school wants it to support and ask how the proposed connection differs technologically from the primary one. Record the answer alongside the primary connection rather than folding the two into one assessment. That makes the choice visible without assuming that a second connection automatically resolves every service interruption or operational need.
Keep the boundary clear in your notes: the recommendation concerns using a different technology for backup. It does not specify a speed, response time, availability level or particular technology. Ask the relevant provider for the details of any arrangement you are assessing, then judge those details against the school’s own requirements.
Check the internal network as well as the broadband connection
The internal network is another part of the assessment, separate from the broadband connection entering the school. Department for Education guidance notes that network switch performance may be affected by the specification and quality of network cabling. A question about switching therefore cannot always be answered by looking only at the external connection.
When the school is investigating a network issue, note which part is being discussed: the external connection, network switches or cabling. Ask the person responsible for the school’s network whether the cabling specification and quality have been considered in relation to switch performance. Keep the answer tied to the particular equipment and network being assessed; the guidance does not establish that a cabling issue is present in every school.
This distinction also helps you avoid drawing a conclusion from incomplete information. If a provider discusses broadband alone, that answer addresses the connection, not necessarily the performance of every part of the school’s internal network. Record any internal-network question for the person or organisation responsible for that part of the setup.
Review filtering and monitoring for the school’s context
Filtering and monitoring need to be assessed against your school’s context, not just a product description. Department for Education guidance recommends considering how students’ risk profiles—including age, special educational needs and disabilities (SEND), and English as an additional language (EAL)—could inform the approach. Use those factors as prompts for discussion about the school’s needs, rather than assuming a single configuration will suit every setting.
Start by describing the student groups and relevant school circumstances that should inform the review. Then ask how those considerations feed into the approach to filtering and monitoring. The purpose is to make the school’s reasoning clear and grounded in its own context.
Your current filtering arrangements and technology policies also matter. Review what the filtering system blocks or allows, and how staff and student bring-your-own-device (BYOD) policies affect technology use. This helps you compare the way school devices and personally owned devices are used with the controls and policies the school has in place.
Include temporary exceptions in that review. Department for Education guidance identifies approval processes for temporary exceptions from filtering and monitoring as a related safeguarding or technology policy consideration. Record who or what process handles an exception in the school’s existing arrangements; do not assume that a provider’s filtering description explains the school’s own approval process.
Generative AI adds another item to the assessment: consider how and where web-based and in-application products are used at your school, and whether filtering and monitoring can handle real-time, dynamic, personalised or AI-generated content. These capabilities are specific questions to put to the people responsible for the system. Do not assume that a general statement about filtering answers them.
Bring the answers together with the school’s risk considerations, current blocks and allowances, BYOD arrangements and exception policies. The resulting review should show which points reflect the school’s own context and which still need an answer.
Clarify cyber incident roles, plans and provider evidence
Cyber incident readiness involves school oversight as well as any work carried out by an IT provider. Department for Education cyber security guidance says school or college leaders should define strategic direction and oversight through a cyber security incident management policy. It also recommends maintaining a cyber response plan with a clear process for handing incident-response tasks between the school and its IT provider.
For your assessment, identify where the policy sets direction and who is responsible for overseeing the school’s approach. Then check whether the response plan sets out how tasks pass between school staff and the IT provider. A clear handover process is part of the plan described in the guidance; responsibility should not be left as an assumption between parties.
The provider’s arrangements are a related but separate check. The guidance recommends checking that your provider has an appropriate, tested cyber response plan and demonstrates compliance with the school’s statutory duties, including those relating to safeguarding, UK GDPR and the DfE Cyber Security Standards. Ask what evidence supports the provider’s response plan and how it demonstrates the relevant compliance.
Keep the school’s policy and plan distinct from the provider’s plan and evidence. A provider’s materials do not, on their own, describe how the school makes decisions about regulatory reporting, communications or liaison with governors and trustees. The cyber security guidance assigns those decisions to school leaders, the data protection officer and safeguarding leads. Record the school’s responsibilities alongside the provider evidence, so the two sides of the arrangement can be considered together without treating one as a substitute for the other.
Record what is verified and what still needs checking
A school-specific assessment is easier to use when it separates established information from open questions. Make one record with a row for each layer—connection, cloud use, backup, internal network, filtering and monitoring, and cyber readiness. For each, note the school’s requirement, what information you have, who supplied it, and what still needs an answer. This is a way to organise the review, not a technical standard or a claim that any particular arrangement is suitable.
For the connection and cloud layers, record whether common online resources can be reached when the system is busy at peak times, and whether both upload and download performance have been considered. If cloud services are in use, list the related questions about access, availability, data protection and backup. Mark a point as answered only when the information you have addresses that specific question.
For the internal network, record whether switch performance and the specification and quality of cabling have been considered together. Keep this separate from the broadband provider’s account of the external connection, so the record shows which part of the setup each answer covers.
For filtering and monitoring, note the school context used to shape the approach, what the system blocks or allows, the effect of staff and student BYOD policies, and how temporary exceptions are approved. Add how and where generative AI products are used, then record whether the filtering and monitoring approach addresses real-time, dynamic, personalised or AI-generated content. Keep an unanswered item visible instead of assuming that a general product description settles it.
For cyber readiness, record the school’s oversight and incident-management policy, the response-plan handover between the school and the IT provider, and the evidence available about the provider’s tested plan and relevant compliance. The result should make both the school’s responsibilities and the provider’s evidence visible. Use the open questions as a direct follow-up list, and keep the limits of each answer beside the conclusion it supports.
Verify current guidance and provider details before choosing a next step
Before changing provision, use current Department for Education guidance and the school’s recorded requirements to revisit any open points. Ask each relevant provider for details that address the specific questions you have identified, including the scope of its connection information, any backup arrangement, and its role in filtering or cyber response. Keep the answers separate by layer so you can see which requirements have been addressed and which still need attention.
School internet provision is a set of connected decisions, not a single number or feature. Your assessment is ready to inform a next step when it records the school’s needs, the information that answers them and the outstanding questions. Individual suitability still depends on the school’s circumstances and the details of the provision being considered.
