School Online Safety Maturity Model
Self-assess your school across five domains. Rate each statement 1–4 (1 = not in place, 4 = fully embedded). Scores are saved in your browser.
This is not an Ofsted-recognised tool. It is a practical educational self-assessment. It does not produce a regulatory rating and should not be presented as such.
Curriculum
0 / 16How online safety is taught across the school, not just in standalone lessons.
Online safety is taught across year groups, not just in PSHE.
—Lessons are updated annually to reflect new platforms, AI, and emerging harms.
—Pupil voice is used to inform what is taught and how.
—Lessons cover harmful content, contact, conduct, and contract risks (the 4Cs).
—
Filtering & Monitoring
0 / 16Filtering and monitoring systems aligned to KCSIE 2025 expectations.
The school has filtering aligned with the DfE filtering and monitoring standards.
—Filtering and monitoring are reviewed at least annually by senior leaders, the DSL, and IT.
—Monitoring alerts are routed to a named person and reviewed within a defined timeframe.
—Mobile-data and BYOD risks are addressed in the AUP and reviewed.
—
Staff Training
0 / 16Annual whole-staff training plus role-specific training for the DSL, deputies, IT, and governors.
All staff receive online-safety training at induction and at least annually.
—The DSL and deputies have completed role-specific online-safety training.
—IT staff understand their safeguarding role around filtering and monitoring.
—Governors have received online-safety training appropriate to their oversight role.
—
Parent Engagement
0 / 16Workshops, communications, and shared agreement templates with families.
The school runs at least one parent online-safety workshop each year.
—Online-safety information is shared with parents at least termly.
—A family agreement template is offered to all families.
—Parents know how to raise an online-safety concern.
—
Governance & Reporting
0 / 16DSL records, governor oversight, and incident logs that show patterns over time.
The DSL maintains a written log of online-safety incidents.
—Governors receive a termly anonymised report on online-safety incidents.
—Incident data is reviewed for patterns at least once a year.
—The online-safety policy is reviewed and approved annually by governors.
—
Results
Online-safety practice is at an early stage. Focus on getting the basics in place: policy, training, filtering review.
Top recommended next actions per domain
Curriculum
- Map online safety coverage across all year groups in one document.
- Run a pupil voice survey to test current understanding and gaps.
- Refresh at least one lesson per term with new platform / AI content.
Filtering & Monitoring
- Complete an annual filtering & monitoring review with the DSL and IT lead.
- Document who reviews alerts and how quickly.
- Audit BYOD and mobile-data use during the school day.
Staff Training
- Schedule annual whole-staff online-safety training before the start of each academic year.
- Identify and book DSL-specific training every two years.
- Add governor online-safety training to the governor development plan.
Parent Engagement
- Plan and publish a parent workshop date for the year.
- Add a termly online-safety section to the school newsletter.
- Share a family agreement template via the school website and at parents' evenings.
Governance & Reporting
- Adopt a single online-safety incident log used by all staff and reviewed by the DSL.
- Add a standing online-safety item to governor meetings.
- Schedule an annual policy review and approval date.
What to do next
Not Ofsted-recognised. Practical educational tool only.