Children’s lives are lived increasingly online, and the risks they face there are now a core part of safeguarding — not a separate, technical concern. Schools have clear online safety requirements under Keeping Children Safe in Education (KCSIE), and these feed directly into the safeguarding judgement Ofsted makes. This article sets out what those requirements are and how schools can meet them.
Quick summary
- Online safety is part of statutory safeguarding under KCSIE, not an optional extra.
- Schools must have appropriate filtering and monitoring in place and review it.
- Online risk is commonly framed as the “four Cs”: content, contact, conduct and commerce.
- Schools should teach online safety, keep staff aware of current risks, and have clear response procedures.
- Online safety feeds directly into Ofsted’s met/not met safeguarding judgement.
Online safety as part of safeguarding
KCSIE is clear that safeguarding includes keeping children safe online. Abuse and harm can take place wholly online, or technology can be used to facilitate offline harm. Staff must therefore stay alert to online dangers alongside all other risks — see What Does Ofsted Look for in Safeguarding?.
This means online safety is not the job of the IT team alone; it is a whole-school safeguarding responsibility.
The “four Cs” of online risk
KCSIE frames the breadth of online risk through four categories — a useful model for schools:
- Content — being exposed to illegal, harmful or age-inappropriate material.
- Contact — being subjected to harmful interaction with other users, including adults posing as children.
- Conduct — a child’s own online behaviour that increases the likelihood of, or causes, harm (including sharing images).
- Commerce — risks such as online fraud, gambling, scams and inappropriate advertising.
Understanding all four helps schools address online safety comprehensively rather than focusing only on the most obvious risks.
Filtering and monitoring
A central requirement is that schools have appropriate filtering and monitoring in place:
- Filtering blocks access to harmful and inappropriate content.
- Monitoring identifies when a pupil accesses or searches for concerning material, so the school can respond.
Schools should ensure these systems are appropriate, effective and reviewed — including understanding who is responsible for them and how alerts are acted upon. Filtering and monitoring should be proportionate, not so restrictive that they impede legitimate learning.
Teaching online safety
Online safety should be embedded in the curriculum, so pupils learn to recognise risks and act safely. This includes age-appropriate teaching about the four Cs, online relationships, digital footprints, and how to report concerns. Well-taught online safety contributes to personal development as well as safeguarding.
Staff awareness and response
- Staff must stay aware of current and emerging online risks, which evolve quickly.
- All staff should know how to respond to an online safety concern and how to report it to the DSL.
- The school should have clear procedures for online safety incidents, including those involving pupil-generated content.
Training should keep pace with new risks — see The Role of Staff Training in Safeguarding.
Online safety and third-party platforms
Schools increasingly rely on digital platforms for learning. Any platform handling pupil data or interaction should be secure and compliant, with appropriate safeguards — a point that overlaps with data protection. See Safeguarding in Online Learning Environments and Protecting Student Data Under GDPR.
Online safety checklist
- ✅ Appropriate filtering and monitoring, reviewed regularly
- ✅ Clear responsibility for filtering and monitoring
- ✅ Online safety taught across the curriculum
- ✅ Staff aware of current online risks (the four Cs)
- ✅ Clear response and reporting procedures for online incidents
- ✅ Third-party platforms checked for security and compliance
- ✅ Online safety reflected in policies and reviewed
Frequently asked questions
Is online safety a legal requirement for schools?
Yes. It is part of statutory safeguarding under Keeping Children Safe in Education, including appropriate filtering and monitoring.
What are the “four Cs” of online risk?
Content, contact, conduct and commerce — a KCSIE framework covering the breadth of online risks children face.
What are filtering and monitoring?
Filtering blocks harmful and inappropriate content; monitoring identifies concerning access or searches so the school can respond.
Should online safety be taught to pupils?
Yes. It should be embedded in the curriculum, age-appropriately, so pupils can recognise risks and report concerns.
How does online safety affect Ofsted’s judgement?
It feeds into the met/not met safeguarding judgement; staff must be alert to online dangers and the school must have effective arrangements.
What about third-party learning platforms?
Any platform handling pupil data or interaction should be secure and compliant, with appropriate safeguards.
Conclusion
Online safety is now inseparable from safeguarding. Schools must filter and monitor appropriately, understand the full breadth of online risk through the four Cs, teach pupils to stay safe, keep staff alert, and ensure the platforms they use are secure. Meet these requirements genuinely, and online safety strengthens both the school’s safeguarding judgement and, more importantly, its pupils’ wellbeing.
How AI Buddy supports schools
When pupils learn on a digital platform, that platform’s own safety and data handling become part of the school’s online safety picture. AI Buddy is designed to support schools in strengthening areas evaluated during Ofsted inspections through secure, privacy-by-design architecture: pupil data minimised and pseudonymised, encrypted AWS hosting, sessions recorded and monitored by a quality assurance team, documented GDPR policies, and staff training. AI Buddy is not endorsed or certified by Ofsted; it is built so that using it strengthens, rather than complicates, a school’s online safety.
Discover how AI Buddy helps schools strengthen teaching, learning and evidence-informed school improvement. Or start a short consultation with our schools team using the form below.
Sources
- Department for Education, Keeping Children Safe in Education (GOV.UK)
- Department for Education, Filtering and monitoring standards for schools and colleges (GOV.UK)
- Ofsted, Education inspection framework: for use from November 2025 (GOV.UK)
- UK Safer Internet Centre, Online safety resources (UK Safer Internet Centre)