TL;DR: IT support for schools means managing the technology that keeps teaching, safeguarding and administration running: networks, devices, cloud platforms, backups, cyber security and the filtering and monitoring that keeps pupils safe online. In 2026 the bar is higher than ever. Every state school in England is expected to work towards the Department for Education (DfE) digital and technology standards by 2030, with annual progress reporting from 2026, and 73% of secondary schools reported a cyber breach or attack in the last year. Most Kent and Medway schools do not need a bigger in-house team. They need an education-focused IT partner that understands DfE compliance, Keeping Children Safe in Education (KCSIE), and how to keep classrooms running on a public-sector budget. This guide explains what good school IT support covers, what the standards actually require, and how to choose a provider.
If your school is weighing up whether to keep firefighting IT in-house or bring in a specialist, this is written for you: business managers, headteachers, IT leads and multi-academy trust (MAT) operations teams across Medway, Chatham, Gillingham, Rochester and the wider Kent area.
What is IT support for schools and what does it cover?
IT support for schools is the ongoing management of the technology a school depends on every day. It goes well beyond fixing a laptop that will not start. A modern school IT service typically covers:
- Network and Wi-Fi across classrooms, halls and outdoor spaces, sized for hundreds of devices connecting at once
- Device management for staff laptops, pupil devices, interactive panels and tablets
- Cloud platforms such as Microsoft 365 for Education or Google Workspace for Education, including accounts, email and shared drives
- Cyber security, from multi-factor authentication (MFA) to patching and endpoint protection
- Backup and recovery for MIS data, pupil records and finance systems
- Filtering and monitoring to keep children safe online and meet safeguarding law
- Helpdesk support so teachers get help quickly instead of losing a lesson to a technical issue
The difference between generic IT support and education IT support is compliance. Schools carry statutory safeguarding duties and specific DfE technology expectations that an ordinary business does not. A provider that does not understand KCSIE or the DfE standards can leave a school exposed, even if the day-to-day helpdesk feels fine.
Why are UK schools being targeted by cyber attacks?
Schools hold exactly what attackers want: large volumes of personal data on children and staff, finance and payment systems, and often stretched IT resources. That combination has made education one of the most attacked sectors in the country.
The government's Cyber Security Breaches Survey 2025 to 2026 found that 73% of secondary schools identified a cyber breach or attack in the previous 12 months, up sharply from 60% the year before. Almost half of primary schools (49%) reported an incident, along with 88% of further education colleges and 98% of universities. Phishing was overwhelmingly the biggest threat, involved in 90% of primary school incidents and 96% of secondary school incidents.
Ransomware remains the most damaging risk. Attacks have locked schools out of their networks, student records and teaching resources for days or in some cases weeks. The National Cyber Security Centre (NCSC) has issued specific alerts about ransomware campaigns targeting UK education.
The uncomfortable detail from the same survey is where the gaps sit. Only 62% of secondary schools had a policy to apply software security updates within 14 days, and awareness of the Cyber Essentials scheme, while rising, still reached only 57% of secondary schools and 20% of primary schools. Meanwhile 53% of both primary and secondary schools have already adopted AI tools, adding a new surface that needs managing. In plain terms: the threat is up, adoption of new tools is up, and basic protections have not kept pace. That is the gap a good IT partner closes.
What are the DfE digital and technology standards for schools?
The DfE digital and technology standards are the government's benchmark for what a well-run school technology setup should look like. There are six core standards that every state-funded school and college in England is expected to be working towards by 2030, with annual progress reporting from 2026:
- Broadband internet standard
- Wireless network standard
- Network switching standard
- Digital leadership and governance standard
- Filtering and monitoring standard
- Cyber security standard
A November 2025 update introduced clearer benchmarks for each standard and set the expectation that schools report progress every year from 2026. The cyber security standard expects schools to have MFA on appropriate systems, modern device management, secure configurations, strong identity governance, and regular patching and monitoring.
Here is how the standards translate into practical action for most schools:
| DfE core standard | What it means in practice | Common gap we see |
|---|---|---|
| Broadband and wireless | Reliable, full-coverage connectivity sized for peak device loads | Wi-Fi blackspots in halls, mobiles and older access points |
| Network switching | A resilient, well-configured wired backbone | Ageing unmanaged switches, no documentation |
| Digital leadership and governance | A named leader and a plan for technology and spend | No single owner, reactive spending |
| Filtering and monitoring | Active, tested systems that keep pupils safe online | "Set and forget" filtering, no annual review |
| Cyber security | MFA, patching, secure configuration, monitoring | Patching gaps, shared logins, no MFA |
You can check your own school against the standards using the DfE's free Plan Technology for Your School self-assessment tool, which gives tailored recommendations. A specialist partner will usually run this assessment with you and build a costed, prioritised plan from the results.
What do the filtering and monitoring standards require?
This is the standard with the sharpest legal edge, because it connects directly to safeguarding. Keeping Children Safe in Education (KCSIE) 2025, the statutory safeguarding guidance in force from 1 September 2025, requires governing bodies to maintain appropriate filtering and monitoring and to review their effectiveness regularly, at least once every academic year.
Crucially, the DfE is clear that simply having filtering in place is not enough. Schools are expected to:
- Use the DfE Plan Technology for Your School tool to self-assess filtering and monitoring against the standards
- Actively test that systems work in practice, not just on paper
- Keep clear approval processes, incident handling workflows and evidence of oversight
- Consider whether their solution can handle real-time, dynamic and AI-generated content, and assess the risks of any generative AI tools they introduce
KCSIE 2025 also widened the definition of online safety harms to include misinformation, disinformation and conspiracy theories. For IT teams that means filtering and monitoring is no longer a one-off installation. It is an ongoing, evidenced process that Ofsted can and does scrutinise. A partner who manages this properly saves your designated safeguarding lead a great deal of risk and paperwork.
What should IT support for a school actually include?
Not all IT support is built for education. The table below compares the three models most Kent and Medway schools choose between.
| Feature | In-house technician only | Generic IT company | Education-focused managed IT support |
|---|---|---|---|
| Helpdesk cover when staff are off | Single point of failure | Usually yes | Yes, team-based cover |
| Understands DfE standards and KCSIE | Varies | Rarely | Yes, built in |
| Filtering and monitoring compliance | Manual, often stretched | Sometimes | Managed and evidenced |
| Cyber Essentials and security hardening | Depends on skills | Sometimes | Standard practice |
| Predictable budgeting for the trust | Salary plus gaps | Variable per ticket | Fixed monthly per site |
| Scales across a MAT | Hard | Sometimes | Designed for it |
Many schools land on a co-managed model, where an internal IT lead handles day-to-day floor-walking and a specialist partner provides the helpdesk depth, security, compliance and strategic planning. If you already have someone in-house who is stretched thin, this is often the most cost-effective route. We cover how that works in our guide to co-managed IT services for Medway businesses.
Whatever the model, strong school IT support should always include proactive monitoring, tested backups, MFA on staff and admin accounts, a clear patching schedule, and an annual review of filtering and monitoring tied to your safeguarding calendar.
How much does IT support for schools cost in Kent?
There is no single price, because it depends on the number of sites, users, devices and how much is already in place. Most schools and trusts move to a fixed monthly cost per site or per user, which makes budgeting predictable across the academic year and avoids surprise invoices every time something breaks. That predictability is often the single biggest reason schools switch. You can see how transparent pricing works on our pricing page, or read our plain-English guide to what managed IT support includes.
How to choose an IT support partner for your school in Medway
Use this quick checklist when comparing providers:
- Do they understand the DfE digital and technology standards and KCSIE, and can they show it?
- Are they Cyber Essentials certified themselves? If they cannot secure their own business, they cannot secure yours.
- Will they run the Plan Technology for Your School assessment and give you a costed plan?
- Do they offer team-based support so you are not reliant on one person's availability?
- Can they cover multiple sites if your school joins or grows into a trust?
- Are they local enough to attend on site quickly when something cannot be fixed remotely?
Local matters more than it sounds. When a network switch fails on results day, a partner based in Medway can be on site the same morning. IT Manager Services is Chatham-based, Cyber Essentials certified, and works with organisations across Kent that cannot afford downtime. Our cyber security service and education IT support are built around exactly these standards. You can also read about the wider Cyber Essentials changes for 2026 and how AI-driven phishing is targeting smaller organisations, both of which apply directly to schools.
Frequently asked questions
Do schools have to meet the DfE digital and technology standards?
The standards are strongly expected rather than a hard legal mandate for every point, but all state-funded schools and colleges in England are expected to be working towards the six core standards by 2030, with annual progress reporting from 2026. Filtering and monitoring is underpinned by statutory safeguarding law through KCSIE, so that element is effectively required.
How often do schools need to review filtering and monitoring?
At least once every academic year, according to KCSIE 2025. Schools are also expected to test that systems work in practice and keep evidence of that oversight, not just confirm that a product is installed.
Is Cyber Essentials required for schools?
Cyber Essentials is not universally mandated for all schools, but it maps closely to the DfE cyber security standard and is widely recommended. Many trusts now require it, and some funding and insurance conditions reference it. Awareness among secondary schools reached 57% in the 2025 to 2026 government survey.
Can one IT provider support a whole multi-academy trust?
Yes. A provider set up for education can standardise security, filtering, backups and helpdesk across every site in a trust, which is usually more consistent and cost-effective than each school buying support separately.
What is the biggest cyber risk to schools right now?
Phishing, by a wide margin. It was involved in 90% of primary and 96% of secondary school incidents in the government's 2025 to 2026 survey. MFA, staff awareness and email security are the most effective defences.
Ready to get your school IT support right?
If your school or trust in Medway or Kent wants technology that just works, meets the DfE standards, and keeps pupils safe online, we can help. Book a call with IT Manager Services and we will run through where you stand against the standards and what a fixed, predictable plan would look like.
Written by the IT Manager Services team. IT Manager Services Ltd is a Cyber Essentials certified, family-run managed IT provider based in Chatham, Medway, named Family Business of the Year 2025 and recognised for its work on email security. We support schools and businesses across Kent that cannot afford downtime.