Wireless networking standards

The school wireless network should be managed (including installation, deployment, configuration, monitoring and ongoing maintenance) by an appropriate education technology support partner, such as the local authority or a designated provider. Schools should operate a wireless network capable of supporting evolving requirements and increasing numbers of devices over time.

An effective managed wireless environment will enable continuous performance monitoring, efficient rollout of updates and quicker resolution of issues, strengthening reliability and safeguarding.

Schools should consider the lifecycle of all wireless network components within their digital planning. Budget provisions should be included to support timely refresh activity and ensure that equipment remains supported and secure throughout its operational life.

Wireless access points (WAPs) should be strategically positioned to provide reliable wireless coverage in all key learning and teaching areas, including spaces where large numbers of devices operate simultaneously. Schools should work with their education technology support partner to regularly undertake a wireless survey to minimise interference and determine optimal WAP placement, density and configuration.

All WAPs must be installed in accordance with manufacturer guidelines and must remain accessible for maintenance and support.

Installations must also align with the network infrastructure standard to maintain integrity, security and performance across the wider networking environment.

Wireless access points (WAPs) must be positioned to minimise physical interference and maintain stable wireless connectivity across the school environment. WAPs must remain unobstructed and not be boxed in, caged or placed in locations where airflow or signal propagation is restricted. Obstructed WAPs can lead to reduced performance, inconsistent coverage and disruption to learning and teaching.

Where WAPs are installed above false ceilings, only models specifically designed and certified for this purpose must be used. This ensures that signal performance, safety requirements and manufacturer guidelines are maintained.

WAP placement must be regularly reviewed in partnership with the school’s education technology support partner to ensure that environmental changes, such as building modifications, new equipment or furniture layouts, do not introduce new physical interference.

Schools should work in partnership with their education technology support partner to ensure their wireless infrastructure remains modern, secure and aligned with current industry standards. All wireless access points (WAPs) should support up to date wireless protocols and should remain capable of meeting evolving digital learning requirements.

Wireless components should be reviewed on a planned cycle, with upgrades informed by device trends, manufacturer updates and the capability of underlying cabling and switching infrastructure.

A modern wireless estate should provide enhanced security by embracing the latest encryption standards and improve support for bandwidth‑intensive activities and emerging technologies such as artificial intelligence and augmented and virtual reality. Maintaining optimal data throughput and low‑latency performance enables responsive and high‑quality digital learning experiences for learners and staff.

Where appropriate, quality of service (QoS) technologies should be used to prioritise critical learning and teaching activities, such as digital assessments, and business critical services, such as telephony. To ensure efficient bandwidth utilisation during the school day, device updates should schedule outside of teaching hours and utilise local caching inline with device management standard F6.

Lifecycle planning for wireless components should be incorporated into the school’s digital strategy, ensuring timely refresh activity and continued alignment with other relevant standards.

Schools should ensure that access to wireless networks is provided through certificate based authentication where this is technically achievable and appropriate to the school’s infrastructure and capacity.

Where supported by existing systems, certificate based authentication strengthens network security and improves protection of personal and sensitive data. Unlike password based methods, this approach authenticates individual devices, reducing the risk of unauthorised access and limiting the impact of shared or compromised credentials. It also supports more controlled, sustainable management of wireless access over time.

Certificate based authentication aligns with strong data protection expectations and, once established, can simplify access management in modern educational environments. Where implemented, the solution should be configured and overseen by the school’s education technology support partner to ensure it remains effective, secure and compliant with safeguarding and information security requirements.

Public key infrastructure (PKI) supports certificate based authentication by enabling the secure issuance, verification and lifecycle management of digital certificates. Through PKI, schools can restrict wireless access to trusted and verified devices, providing the cryptographic assurance needed to meet national expectations.

Schools should ensure that their wireless networks are appropriately segmented to provide secure access for local users, guests and other service groups. A dedicated guest network should be implemented to allow visitors to access the internet without compromising the security of the school networks used by learners and staff. This separation helps maintain the integrity of operational systems and supports a secure digital learning environment.

Implementing separate VLANs for guest access and for internet of things (IoT) devices, such as CCTV systems, environmental sensors or business management tools, strengthens network security and helps safeguard sensitive data. VLAN‑based segmentation supports effective monitoring, reduces the risk of unauthorised access and ensures that users and devices have access only to the services appropriate to their role or function.

This structured approach to network segmentation supports compliance with data protection requirements, enhances overall security and ensures that educational, administrative and public sector systems remain protected and functional.

Access to wireless networks should align with the school’s acceptable use policy (AUP) and all relevant safeguarding policies. All users are required to follow the AUP, which sets out appropriate, safe and responsible use of digital resources and network services.

Schools should manage wireless access in a way that supports wider safeguarding, security and data protection requirements. Wireless access controls, authentication methods and user permissions should be configured to ensure that learners, staff and visitors can only access resources appropriate to their role, in line with the school’s established policies. Where appropriate, access should be time bound to ensure regular review of allowed access.

Further detail on filtering, monitoring and safeguarding measures is available in the web filtering and online safeguarding standard and the planning and managing digital technology in schools guidance.