Key Takeaways
- School IT support is fundamentally different from business IT — safeguarding obligations, DfE standards, and MIS integrations make it a specialist area.
- Keeping Children Safe in Education (KCSIE) is updated annually by the DfE and has direct implications for your school’s filtering and monitoring setup.
- Most primary schools and small MATs are significantly underserved by generic IT support contracts that don’t understand the education sector.
- A good managed IT support provider for schools should proactively handle DfE compliance — not wait for you to flag it.
- MATs often overpay by managing IT separately at each site — centralised managed support typically delivers both cost savings and better consistency.
In This Guide
02 What Managed IT Support for Schools Should Include
03 KCSIE, Safeguarding, and Filtering Obligations
04 DfE Technology Standards
05 MIS Systems: SIMS, Bromcom and Arbor
06 Microsoft 365 vs Google Workspace for Education
07 Managed IT Support for MATs
08 Questions to Ask Any School IT Provider
09 FAQ
School business managers across Northamptonshire are increasingly responsible for decisions that go well beyond the traditional finance and operations remit — and IT is one of the most complex. A primary school’s IT environment involves safeguarding obligations, DfE compliance requirements, MIS system integrations, staff devices, pupil devices, parental communication platforms, and a network that needs to work reliably from the moment the gates open. Managing all of this through a generic business IT support contract — or relying on a part-time technician who visits once a fortnight — leaves most schools perpetually behind. This guide covers what managed IT support for schools in Northamptonshire should actually look like, what the compliance obligations are, and what to look for when choosing or reviewing a provider.
Why School IT Is Different From Business IT
A general-purpose IT support contract designed for an accountancy firm or logistics business does not translate well to a school environment. The reasons are specific:
- Safeguarding is a legal obligation, not a preference. Schools must have appropriate filtering and monitoring in place under Keeping Children Safe in Education (KCSIE). This is an Ofsted inspection area — not having it in place has direct consequences.
- The DfE Technology Standards set a baseline. The Department for Education publishes technology standards that schools are expected to meet. Most generic IT providers are not familiar with these.
- MIS systems require specialist knowledge. SIMS, Bromcom, and Arbor are not standard business applications. IT support that can’t configure, troubleshoot, or advise on MIS integrations is of limited use to a school.
- Term-time pressures are non-negotiable. A server failure during SATs week or a network outage on parents’ evening is not the same as a printer problem on a quiet Tuesday. School IT support needs to understand that timing matters.
- Users range from IT-confident teachers to 5-year-olds. Device management, age-appropriate content filtering, and classroom technology all require a different approach to a standard office environment.
- Budgets are tight and scrutinised. School IT spend is subject to governor oversight and value-for-money expectations. A provider should be transparent about costs and help you prioritise rather than upsell.
The core problem: Many Northamptonshire primary schools and small MATs are currently supported by either a one-person IT freelancer with no school-specific knowledge, or a large national MSP that treats them as a low-priority account. Neither delivers what the school actually needs.
What Managed IT Support for Schools Should Include
Helpdesk
Same-day
Term-time response that matches school hours, not standard 9–5 business SLAs
Compliance
KCSIE
Annual review against updated DfE guidance — proactively, not when Ofsted arrives
Devices
MDM
Centrally managed laptops, tablets, and Chromebooks — updates, policies, and remote wipe
A comprehensive managed IT support contract for a Northamptonshire school should cover:
- Proactive monitoring and patching. Servers, network equipment, and workstations monitored continuously. Security patches applied automatically, not reactively after an incident.
- Helpdesk support during school hours. Staff should be able to call or raise a ticket and get a response that day. Term-time support windows should be clearly defined in the contract.
- Filtering and safeguarding tools. Configuration and ongoing management of your content filtering solution (Smoothwall, Lightspeed, Cisco Umbrella, or equivalent). Annual review against updated KCSIE guidance.
- Microsoft 365 or Google Workspace for Education management. Account provisioning, licence management, email security, and admin support for staff and pupil accounts.
- Device management (MDM). Centralised management of all school devices via Intune (Microsoft) or Google Admin Console. Policy enforcement, app deployment, and remote wipe capability.
- MIS system support. First-line support for your MIS (SIMS, Bromcom, or Arbor) and liaison with the MIS vendor on more complex issues.
- Network and WiFi. Management of your school network infrastructure, including WiFi access points, switches, and firewall. Classroom WiFi should be stable enough for simultaneous class use.
- Backup and disaster recovery. School data — pupil records, assessment data, staff files — backed up daily with a verified restore process.
- Annual IT audit and technology plan. A written assessment of your current infrastructure against DfE standards, with a prioritised plan for the year ahead.
KCSIE, Safeguarding, and Filtering Obligations
Keeping Children Safe in Education is the statutory guidance issued by the Department for Education that all schools and colleges must follow. It is updated annually, typically in September at the start of the academic year. The IT implications are significant and are an active area of Ofsted inspection.
Part C of KCSIE specifically covers online safety and the use of technology. Schools are required to have:
- Appropriate filtering. Internet filtering that blocks harmful content while remaining appropriate for the age range. Neither over-blocking (which impairs legitimate teaching) nor under-blocking is acceptable. The DfE filtering and monitoring standards set out specific minimum expectations.
- Appropriate monitoring. Monitoring of online activity on school systems to identify safeguarding concerns — searches, communications, or content that may indicate a child is at risk. This is separate from filtering.
- A named lead for online safety. A designated safeguarding lead (DSL) with responsibility for online safety, supported by clear policies.
- Annual review. Filtering and monitoring arrangements should be reviewed at least annually against the current KCSIE guidance.
Ofsted consideration: Inspectors may ask to see evidence that filtering and monitoring are in place and have been reviewed against current KCSIE guidance. “We have a filter” is not sufficient — you need to be able to demonstrate it meets the DfE standards and has been reviewed recently. Your IT provider should be producing documentation that supports this.
DfE Technology Standards
The Department for Education publishes technology standards for schools that set minimum expectations across four areas. These are not legally binding but are referenced in Ofsted inspection frameworks and form the basis of what a well-run school IT environment should look like.
| Standard Area | What It Covers | Common Gap in Primary Schools |
|---|---|---|
| Devices | Minimum hardware specs, operating system currency, device-to-pupil ratios | Older devices still running Windows 10 without a refresh plan; no MDM in place |
| Connectivity | Minimum broadband speeds, WiFi coverage, network reliability | Inadequate WiFi — single router rather than access point infrastructure |
| Filtering & Monitoring | Age-appropriate filtering, monitoring tools, annual KCSIE review | ISP-level filtering only (not school-managed); no monitoring layer |
| Cyber Security | Patch management, access controls, backup, staff training | No formal patching schedule; shared admin passwords; untested backups |
A managed IT support provider working with Northamptonshire schools should audit your environment against these standards on day one and produce a gap analysis. If they don’t know what the DfE standards are, that tells you something important about their education sector experience.
MIS Systems: SIMS, Bromcom, and Arbor
Your Management Information System (MIS) is the backbone of school administration — pupil records, attendance, assessment, reporting, and communication. IT support that can’t speak the language of your MIS creates a significant blind spot.
| MIS | Common In | Hosting | IT Support Considerations |
|---|---|---|---|
| SIMS (Capita) | Established schools, MATs with legacy contracts | On-premises or hosted | SQL Server dependency; local install requires server maintenance; integration with finance modules |
| Bromcom | MATs, growing adoption in primaries | Cloud-based | Browser-based; IT role is connectivity and SSO integration; less server dependency |
| Arbor | Primaries, LA-maintained schools | Cloud-based | Browser-based; IT support needed for SSO, device compatibility, and staff training on new features |
Even with cloud-based MIS platforms, your IT provider plays a role in ensuring devices can access the system reliably, that single sign-on is configured correctly with Microsoft 365 or Google Workspace, and that any on-site peripherals (printers, registers, door entry systems) that integrate with the MIS are working correctly.
Microsoft 365 vs Google Workspace for Education
Most Northamptonshire primary schools use one of these two platforms. Both have free or heavily discounted Education tiers. The choice tends to follow local authority recommendations or trust-wide standardisation rather than individual school preference — but if you’re reviewing your setup, here is a practical comparison:
| Microsoft 365 Education | Google Workspace for Education | |
|---|---|---|
| Free tier available | ✓ (A1) | ✓ (Fundamentals) |
| Familiar to staff | High (Word, Excel, Outlook) | Medium (Docs, Sheets, Gmail) |
| Device management | Intune (powerful, requires setup) | Google Admin (simpler for Chromebooks) |
| Best for | Schools already using Windows devices; MATs wanting unified management | Schools with Chromebook fleets; tighter budgets |
| GDPR / data residency | UK data residency available | EU/UK data residency available on paid tiers |
| MIS integration | Strong (SSO with most MIS platforms) | Good (SSO available, varies by MIS) |
MAT note: If you’re a multi-academy trust standardising across sites, Microsoft 365 with Intune for device management generally offers more consistent centralised control — particularly if sites are a mix of Windows and iPad devices. Google Workspace tends to win on simplicity and cost where Chromebooks are the primary device.
Managed IT Support for MATs
Multi-academy trusts present specific IT challenges that single-school support contracts don’t address well. The most common pattern we see is trusts where each school inherited a different IT setup — different providers, different platforms, different equipment — and no one has rationalised it at trust level.
- Centralised vs federated management. A well-run MAT IT setup allows central visibility of all sites from a single console — device health, security posture, patch status, backup jobs — without requiring a full-time technician at each school.
- Consistent security baseline. One school with weak password policies or unpatched devices is a risk to the entire trust. Centralised MDM and policy management closes this gap.
- Shared infrastructure where appropriate. Centralised Microsoft 365 tenancy, shared backup infrastructure, and a single helpdesk contact for all sites reduces both cost and complexity.
- Single contract, multiple sites. Rather than separate contracts with different providers at each school, a trust-wide managed IT contract provides consistent service levels, a single point of accountability, and typically better value per site.
Typical saving: A MAT consolidating from separate per-school IT contracts to a single managed support agreement typically saves 20–35% on total IT spend while improving service consistency and compliance oversight across all sites.
Questions to Ask Any School IT Provider
- How many schools do you currently support? And what types — primary, secondary, MAT? A provider with no education clients may not understand the sector-specific requirements.
- Are you familiar with the current KCSIE guidance? Ask them to explain what it means for filtering and monitoring. If they need to look it up, that’s telling.
- Can you support our MIS system? Name your MIS and ask specifically what they can and can’t do with it.
- What is your term-time response SLA? Get a specific answer — hours, not “we’ll get back to you.” Make sure it covers your actual school hours.
- How do you handle the annual KCSIE review? A good provider does this proactively and produces documentation. A poor one waits to be asked.
- What does your onboarding process look like? Switching IT providers mid-year is disruptive. A structured onboarding plan — audit, documentation, transition — is a sign of a professional operation.
- Can you provide references from other Northamptonshire schools? Local experience matters — knowing the county’s networks, local authority relationships, and common setups is genuinely useful.
Frequently Asked Questions
How much does managed IT support for a primary school cost in Northamptonshire?
For a typical Northamptonshire primary school (200–400 pupils, 30–50 devices, one site), a comprehensive managed IT support contract typically costs £600–£1,200 per month depending on the scope of support, number of devices, and whether MIS support and safeguarding tool management are included. This compares favourably to the cost of a part-time in-house IT technician when you factor in employment costs, cover, and the breadth of expertise a managed provider brings. MAT pricing is typically agreed per site with a trust-wide discount.
What is the difference between filtering and monitoring for schools?
Filtering blocks access to harmful content before it reaches the user — websites categorised as adult content, extremism, violence, and so on. Monitoring records or flags activity on school systems so that safeguarding concerns can be identified — for example, a pupil searching for self-harm content or using communication tools inappropriately. KCSIE requires both. Filtering alone is not sufficient: a child could be communicating about a safeguarding concern through an unmonitored platform that isn’t “blocked” by a filter. Your IT provider should be managing both layers.
Does our school need Cyber Essentials certification?
Cyber Essentials is not currently mandatory for all schools, but the DfE Technology Standards strongly recommend it and some local authority frameworks expect it. More practically, it represents a sensible baseline of cyber hygiene — patching, access controls, firewall configuration, malware protection, and secure configuration — that every school should be implementing regardless of formal certification. Cyber Essentials Plus (the independently verified version) is increasingly being requested by insurers. A good managed IT provider should be able to support your school through the certification process.
Can our MAT use one IT provider across all schools?
Yes, and in most cases this is the better approach. A single managed IT provider working across your trust delivers consistent security policies, a unified helpdesk, centralised monitoring, and economies of scale that per-school contracts can’t match. It also gives the trust leadership a single point of accountability rather than managing relationships with multiple suppliers. The transition requires careful planning — particularly if existing contracts are at different renewal points — but the long-term operational and financial benefits are significant.
What should we do if we’re currently supported by a non-specialist IT company?
Start by asking your current provider directly: are they familiar with KCSIE? Can they produce documentation showing your filtering and monitoring meets the DfE standards? When did they last review your setup against updated guidance? If the answers are vague or they’re hearing these questions for the first time, that’s a clear signal. You don’t necessarily need to switch immediately — but you should be asking for a formal compliance review and getting the gaps documented. If that review reveals significant shortfalls, it’s worth getting quotes from education-specialist providers for comparison.
Is it disruptive to switch IT providers mid-year?
It can be if managed poorly, which is why a structured handover process matters. The key risks are gaps in documentation (passwords, network diagrams, system configurations) that the outgoing provider holds and may not hand over willingly, and continuity of service during the transition period. A professional incoming provider will carry out a full audit before taking over, create their own documentation, and plan the handover to avoid impacting teaching time. Most transitions are completed over a 4–6 week period. Summer term is the easiest time to switch; mid-autumn and spring terms are manageable with good planning.
Free IT Audit for Your Northamptonshire School
We’ll assess your current setup against DfE Technology Standards and KCSIE requirements — and tell you exactly where the gaps are. No obligation, no sales pressure.
