Next Generation Learning How good is your Acceptable Use Policy (AUP)? Presented by Ruth Hammond, Manager, Safeguarding Programmes Presented at BETT 2009 on Saturday 17 January

What is an AUP? AUP: Acceptable-use policy. A document detailing the way in which new and emerging technologies may and may not be used and listing sanctions for misuse.

Why should you have one? Ofsted SEF Question 4b includes: To what extent do learners feel safe and adopt safe practices? For example: the extent to which learners adopt safe and responsible practices, dealing sensibly with risk, in a range of activities within and outside the classroom, including the use of new technologies and the internet. Dr Tanya Byron - Safer children in a digital world – recommends: “...in all schools action is taken at a whole-school level to ensure that e-safety is mainstreamed throughout the school’s teaching, learning and other practices. In particular I recommend that: Government should encourage schools to use Becta’s self-review framework to drive continual improvement in schools’ use of ICT including with regard to e- safety. 100% of schools should have AUPs that are regularly reviewed, monitored and agreed with parents and students. Guidance on this should be incorporated in Becta’s revised self-review framework.”

Why are they important? Effective AUPs can: help to establish, and reinforce, safe and responsible online behaviours protect staff who are also susceptible to risks protect sensitive and personal data by outlining how staff use technology and systems securely at all times help parents and carers to reinforcing positive and appropriate behaviours in their children ensure parents and carers themselves follow appropriate behaviours on the school network and at home

What should it consist of? A detailed management document outlining the school’s vision and approach to e-safety including incident handling procedures, roles and responsibilities A security and data management policy – for example; appropriately configured and managed firewalls, antivirus software and secure remote access facilities – requirements for strong passwords and regular password changes – not sharing usernames and passwords, ensuring personal data is protected and only used in a way that is in keeping with data protection requirements An end-user AUP distilling the key messages from the above to give users a clear understanding of what they can and can’t do. It should be clear and concise, and written in a tone appropriate to the age and understanding of the users Other policies? -optional additional policies? Eg standalone mobile phone policies -e-safety messages must also be embedded within wider policies as appropriate, such as child protection, behaviour and anti-bullying policies

General principles Be clear and concise Reflect your setting Have end-user input Be written in a tone and style that is appropriate to the end-user Promote positive uses of new and emerging technologies Clearly outline what network monitoring will take place Clearly outline acceptable and unacceptable behaviours when using technology and network resources provided by the school or when using personal technologies on school premises or networks Clearly outline the sanctions for unacceptable use Be regularly reviewed and updated Be widely, and regularly, communicated to all stakeholder groups

One presentational approach could be: What you will do… What you won’t do… What we will do… What we won’t do…

How does it fit into the bigger agenda? Your policies and practice must also reflect and complement those policies of the wider area, whether this is – the local authority (LA) – regional broadband consortia (RBC), – or local safeguarding children boards (LSCB).

Are there any examples I can use? Yes – lots! Some examples: Hertfordshire Grid for Learning; Kent County Council; Leeds Learning Network; London Grid for Learning; South West Grid for Learning (SWGfL); Staffordshire Safeguarding Children Board (SSCB); West Midlands Regional Broadband Consortium (WMnet); Northamptonshire County Council; Look to your local authority and/or RBC for local policies

But what about different settings….? Early years settings Primary schools Secondary schools Home access and parental engagement FE and skills settings Children with special educational needs or particular vulnerability Looked after children Boarding schools Other LSCB services eg youth clubs, libraries, Sure start centres

What else do we need to do? Infrastructure and technology – providing a ‘first line of defence’ through tools such as firewalls, anti-virus software, content filtering, and network monitoring systems. Education and training – essential for both children and staff alike, providing awareness of issues and risks, and strategies for dealing with them. With an increased focus on home access and parental engagement using online tools, education and training will also be important for parents and carers too. Standards and inspection – monitor and report on e-safety provision, and maintain logs of e-safety incidents, resulting outcomes, and actions taken Appoint an e-safety co-ordinator Conduct an audit Ensure the AUP is widely disseminated and understood

How do we keep up to date? Visit your local authority website Visit the Becta Safeguarding pages Join Safetynet Order a copy of our new publication! …………to be launched on Safer Internet Day – 10 February 09

Contact… Ruth Hammond Becta Millburn Hill Road Science Park Coventry CV4 7JJ T+44 (0) F+44 (0)