Technologies and ICT Services in Schools

Policy

The purpose of the policy is to establish the requirement for Victorian government schools to use technologies and ICT services provided by the department.

Summary

• The department provides a suite of technologies and ICT services to schools.
• Where a school has previously adopted technology now provided by the department, schools must transition to the department technologies by the end of 2028. Refer to the ‘Department-provided technologies’ section below for further details.
• Schools must not implement the same technologies where the technology is provided by the department.
• Schools must not adopt different technologies where the department technology provides the same service.
• Where the technology is not provided by the department, schools may continue to adopt and use those technologies provided they have been assessed as meeting child safety, privacy, records management and information security requirements. Refer to the ‘Other Technologies and Services’ section in the Guidance tab for further details.
• Schools should update their ICT strategic plans to align with the objectives of this policy.

Details

The increased cyber security risk and emerging regulatory standards means it is no longer appropriate for schools to operate separate technology environments. This is because:

• cyber security incidents continue to increase in both sophistication and frequency resulting in privacy breaches and extended outages impacting curriculum delivery
• mitigating risks and responding to incidents in a diverse technology landscape is protracted and less effective
• the accelerating pace of technology adoption in schools without the necessary privacy, security and child safety assessments increases risk of harm
• Standard 9 of the Child Safe Standards requires schools and the department to maintain the safety of children in an online environment
• future compliance and reporting requirements to the Office of the Victorian Information Commissioner (OVIC) will require individual schools to report to OVIC every 2 years on their compliance with the standards of the Victorian Protective Data Security Framework (VPDSF) unless they are using department-provided technologies and ICT services (in which case the department will report to OVIC)
• by the end of 2028 schools will be required to have migrated their school-managed technologies to department-provided technologies where available. Schools will be contacted to advise of the migration process. Refer to ‘Migrating to department provided technologies’ section below for further details.

Department provided technologies and ICT services

The department provides a suite of technologies and services to schools. These technologies are regularly assessed for compliance with the child safety, privacy and security standards. Department-provided technologies include:

• high speed internet access with content filtering
• collaboration platforms including Microsoft 365, Google Workspace for Education and WebEx
• enterprise grade WiFi
• single identity for staff and students
• single email address for staff and students
• cloud-based device management solution
• server endpoint detection and response.

In response to the growing cyber security threat to schools the department is working on enhancing the suite of technologies and services to schools to include additional cyber security capabilities, which will be added to the technologies above.

Migrating to department provided technologies

By the end of 2028 schools will be required to have migrated their school-managed technologies to department-provided technologies where available.

The Securing Connected Learners (SCL) Program has been established to support schools in migrating to department-provided technologies by the end of 2028 and schools will have the opportunity to influence improvements to the technology and services the department provides.

Refer to SCL Program (staff login required) for further information.

If existing commercial agreements for equipment, services and software are due for renewal and sufficient notice is provided, the SCL Program may be able to facilitate an early transition providing a cost-avoidance opportunity for schools. Please use the Contact us page to notify the SCL Program of these arrangements.

Related policies

• CCTV in Schools – Installation and Management
• Cybersafety and Responsible Use of Digital Technologies
• Digital Learning in Schools
• eduMail (employee email)
• eduPass – Identity and Access Management in Schools
• ICT Support for Schools
• Information Security – InfoSafe
• Privacy and Information Sharing
• Procurement – Schools
• Records Management – School Records
• School Administration Systems

Relevant legislation

• Child Wellbeing and Safety Act 2005 (Vic)
• Health Records Act 2001 (Vic)
• Ministerial Order 1359 – Implementing the Child Safe Standards – Managing the risk of child abuse in schools (PDF)
• Privacy and Data Protection Act 2014 (Vic)
• Victorian Protective Data Security Framework

Guidance

Supporting transition

From 2023, the Securing Connected Learners (SCL) Program will include a number of projects to support schools in the transition to department-provided technologies including the decommissioning of school-managed technologies and identities. The transition will be incremental and designed to support schools and minimise disruption.

The approach and sequence of transition will be based on a balanced assessment of risk, need and benefit. The SCL Program will work with schools to discover and understand the ICT landscape of each school and develop individual transition plans.

The SCL Program will also seek school input to further evolve and expand the suite of department-provided technologies.

Updating school ICT strategic plans

A school’s ICT strategic plan aligns with the whole-school strategic plan and annual implementation plans to describe how school goals will be enabled through the use of digital learning resources. Prior to transitioning to department-provided technologies, schools should review and update their ICT Strategic Plans to align with the objectives of this policy. More information is available on the ICT strategic planning guidelines in the Guidance tab of the Digital Learning in Schools Policy. Schools must not adopt technologies where the technology is provided by the department.

Schools can also register their interest by visiting the SCL Program information site (staff login required) for early transition to department technologies with the SCL Program. Additionally, if existing commercial agreements for equipment, services and software are due for renewal and sufficient notice is provided, the SCL Program may be able to facilitate an early transition providing a cost-avoidance opportunity for schools.

Other technologies and services

Schools will be able to continue to adopt and use other technologies not currently provided by the department. Some examples include:

• student management systems
• timetabling software
• print charging software
• library systems
• Internet of Things (IoT) such as printers, multifunction devices, projectors, hearing augmentation.

When seeking to use technologies not provided by the department, schools must ensure they comply with department policies and standards. Where the technology stores personal data, schools must complete a privacy impact assessment (PIA). More information about PIAs can be found in the Privacy and Information Sharing Policy.

Resources

Further information about the Securing Connected Learners (SCL) Program can be found on the SCL Program information site (staff login required).

For further enquiries, contact the Securing Connected Learners Program: Contact us (staff login required).