Meeting digital and technology standards: Moving to the cloud

You may have been considering moving to a Cloud-based service for a while – or may already be using one. In this article, we look at some of the key standards schools must meet when using or moving to cloud solutions

Cloud solutions or services are hosted and managed on the internet rather than locally in the school. They can be accessed from a wide range of devices at anytime from anywhere with an internet connection. Your school may already be using some cloud solutions – particularly if you host online meetings or Zoom calls.

One advantage of cloud solutions is that it reduces the need for local servers – this allows schools to save money, reduce onsite equipment, improve safety and security and allows staff to work more flexibly and collaboratively across multiple sites and locations. It is common for schools to utilise a hybrid system, with some cloud solutions running alongside on onsite servers.

It is important that before switching to a cloud-based solution, schools take the necessary steps to ensure compliance with recommended standards. You should make sure to check the following steps off your checklist before proceeding:

• understand the software, devices and data you use and what you use them for
• consider the types of data you need to import and export easily from the cloud
• ask your IT service provider about free cloud services your school can benefit from

Security

When using or switching to a cloud solution, steps must be taken to ensure the security of data being used, stored and transferred. For more information on this, you can find guidance here: cyber security standards for schools and colleges.

Broadband capacity

To make sure cloud solutions can be used effectively you must have reliable broadband with the capacity to support your needs. You should do this by following the broadband internet standards for schools and colleges.

It services provider support

Schools must ensure that cloud solution and IT service providers handle data in compliance with the law, documenting and recording assurances. IT service providers should configure cloud solutions to meet the National Cyber Security Centre (NCSC) cloud security principles. Since many cloud solutions operate independently, requiring multiple logins and passwords, schools should consider using a central ID and access management tool to meet data protection and safeguarding obligations. This enhances data security and cyber security measures.

The above guidance offers a concise summary of key points from the regulations. For a comprehensive overview, visit the government website for more details. Stay tuned for the next article in this series, where we delve deeper into cyber security considerations for schools.