Web filtering and online safeguarding

Every internet request that is transmitted via a schools’ network should be automatically scanned by a web filtering and online safeguarding solution for inappropriate and harmful content.

Schools to implement a web filtering and online safeguarding solution that provides real-time content filtering, which includes image and video functionality, as well as text-based filtering, that is effective for multi-lingual content. The solution should provide on-device web filtering for end-user devices as well as on-edge filtering where on-device web filtering is not feasible such as smart devices.

Schools should consider web filtering and online safeguarding solutions with comprehensive reporting capabilities to detect and address potential security or policy violations. The implementation of on-device filtering can provide a full web audit trail for safeguarding alerts when using a school-owned device in the school or outside of the school network.

Apple iOS devices, schools must consider the guidance that has been developed by Welsh Government.

To enable effective user-based monitoring of internet activity, ideally web filtering should be applied through authenticated access allowing monitoring to distinguish between different users and provide effective and informative safeguarding alerts.

It is essential that age-appropriate controls are applied across all networks including guest/visitor networks.

The implementation of age-appropriate web filtering is an essential component to ensure learners and staff have access to appropriate material while keeping them safe online. Age-appropriate controls should be reviewed and implemented in line with AC3.

It is essential for schools to apply web filtering categories across all networks to ensure harmful content is consistently blocked while not prohibiting the delivery of the curriculum. Where appropriate, specific websites can be approved/prohibited, otherwise known as allow/deny lists, to ensure web filtering is not restrictive to learning and teaching.

Every webpage can contain several categories. The web filtering and online safeguarding solution should ensure that any content associated with a blocked category is detected and blocked.

To ensure schools have appropriate web filtering by category classifications, the Welsh Government and local authorities have created the following agreed guidelines. Special schools and pupil referral units should adopt the suggested categories to be developmentally appropriate for their learners' cognitive understanding rather than applying them according to their chronological age.

The headteacher is accountable for deciding the content that is blocked or unblocked in accordance with the processes defined by your education technology support partner.

To support schools to implement these standards, the Welsh Government has developed the Websafe solution as part of the PSBA network. Websafe is accredited in accordance with the UK Safer Internet Centre filtering standards. Websafe supports schools to authenticate their users using their Hwb credentials.

Schools should ensure that monitoring policies and practices are in place to effectively protect learners online.

Web filtering solutions use technology to monitor a user’s activity. These solutions should generate safeguarding alerts/reports when harmful or inappropriate content is detected. Monitoring should also be supplemented by practitioners being present in the school environment to observe learners’ online activities.

Schools must ensure that all policies and practices are developed and agreed with key staff, including, the designated safeguarding person, education technology support partner and the school leadership team (SLT). Assigned roles must be identified and allocated with clear responsibilities and actions to be taken in the event of a safeguarding alert. 

Schools must educate learners and staff on responsible online behaviour and privacy protection recommendations. The school’s SLT is responsible for ensuring that all school staff understand their role, are appropriately trained, understand and adhere to policies and practices and know what action to take on reports and concerns.

This activity can supplement the school’s existing online safety education programme to help teach learners about the importance of responsible and considerate online behaviours. For further advice and resources visit the keeping safe online area of Hwb.

It is essential schools ensure that safeguarding alerts are enabled with a clear policy for key staff to act and respond quickly. Schools must ensure all appropriate school staff are aware of the process to undertake in the event of a safeguarding or welfare incident and to act in accordance with the school’s policy.

Alerts provide additional safeguards to detect where a user may be at risk or exposed to inappropriate or harmful content online. Safeguarding alerts support real-time monitoring and generate notifications which key school staff can use to provide proactive support to help keep learners safe.

Safeguarding alerts should be included in the review process (AC6) and may inform the need to conduct a review.

The testing and continual monitoring of web filtering and online safeguarding is critical to ensure it remains effective. It is recommended that web filtering is tested using the South Wales Grid for Learning (SWGfL) test filtering appliance. This should be undertaken across the digital environment in different locations as well as on different device types.

It is essential that the school’s web filtering and online safeguarding policies and processes are reviewed at least annually to ensure compliance with statutory requirements and respond to evolving educational needs. A review should also be undertaken if a safeguarding risk is identified, a change in working practices or where new technology is introduced. 

It is recommended that the school’s SLT agrees a clear review structure which ensures that the following are assessed:

• implementation of related safeguarding and technology policies and procedures
• roles and responsibilities (including staff training)
• monitoring mechanisms and strategies
• any safeguarding alerts or incidents encountered since the previous review

Schools are encouraged to identify a lead to oversee the review, actively seeking feedback from stakeholders, e.g. designated safeguarding person, digital lead and practitioners, to identify and address areas for enhancement. The review mechanism must have a clear process to investigate, implement and clearly communicate actions arising to all relevant parties.

The review lead should provide assurance to their governing body that the web filtering and online safeguarding systems are working effectively. 

Where schools provide a school-owned, end-user device to support learners and staff with remote learning and teaching outside of the school network, web filtering and online safeguarding should be applied.

It is essential that consideration is given to the deployment and management of these devices in accordance with the Device Management Standard.

When a school provides a device to a learner, it is recommended that schools implement web filtering and online safeguarding by authenticated access when retaining ownership and management responsibility of the device. This can provide a full audit trail of internet activity and generate safeguarding or welfare alerts to help keep learners safe even when working from home. 

It is vitally important that schools ensure appropriate acceptable use conditions are agreed with parents/carers when providing devices for use outside of the school network. Parents and carers will often assume the school is responsible for all safeguarding and wellbeing considerations and therefore the conditions of use should make it clear the parent/carer is responsible for monitoring a learner’s online activities at home. Further advice and guidance for parents/carers is available.

Where a school ‘gifts’ an end-user device to a learner/family to help improve digital inclusivity in your local community, it is important to make it clear that the school is no longer responsible for the management or the ownership of the device. For further support, schools can refer parents and carers to Get Safe Online who provide unbiased information on online safety.