TL;DR: Digital leadership and governance is the foundation the other five DfE standards sit on. It asks schools to name an accountable SLT digital lead, keep three registers up to date (contracts, assets, information assets), include digital technology in disaster recovery plans, and maintain a two-year digital strategy reviewed annually. Start with naming the digital lead, everything else follows from there.
Digital governance means somebody senior owns the direction, and the school has reliable information to make decisions. That includes knowing what technology and services you have, what you pay for, where important information sits and what happens if something fails.
Without clear ownership and reliable records, contracts can renew unnoticed, unsupported equipment can remain in use and responsibilities can fall between people. The issue isn’t paperwork for its own sake; it’s whether the school can make informed decisions before something becomes urgent.
The standard that everything else depends on
Of the six DfE standards, this is the one that quietly underpins the rest. Cyber security, filtering and monitoring, broadband, none of them are managed well without someone accountable for the decisions, and a clear record of what your school actually has.
The standard is built in a deliberate order. The DfE asks schools to complete three foundational pieces first, before moving on to the fourth: an overall digital technology strategy. That sequencing matters, because a strategy built without knowing what you currently have or who owns what tends to fall apart within a year.
What the standard actually asks
Someone named and accountable
Every school needs an SLT digital lead: someone with strategic oversight of digital technology, linking IT support, curriculum leads, your data protection officer and your safeguarding lead. They don’t need to be technical. They need to be positioned to make decisions and be accountable for them.
Up-to-date registers
Three of them, specifically: a contracts register (licences, subscriptions, your broadband and IT support agreements), an asset register (the physical kit you own, its age and its review date), and an information asset register (what data you hold and where). Without these, schools routinely lose money to auto-renewed subscriptions nobody remembers signing up to, or find out a critical system is unsupported only after it fails.
Digital technology in your disaster recovery and business continuity plans
If a cyber incident happened tomorrow, would staff know what to do in the first hour? This standard asks for that to be written down, tested annually, and kept somewhere accessible even if your main systems are down.
A digital technology strategy, reviewed every year
Once the first three are in place, the DfE expects a minimum two-year strategy that’s actually reviewed annually, not filed and forgotten. It should be led by what staff and students need, not by what’s newest on the market. We think of that annual review as a chance to future-proof what the school already has, not an audit designed to find problems to sell you. The question worth asking every year isn’t “what’s wrong,” it’s “what will we need in two years that we don’t have yet.”
Who’s actually meant to be doing this
This is one of the few standards where the DfE names a job, not just a responsibility. The headteacher or principal appoints the SLT digital lead, who then works with IT support, your business or finance team, your data protection officer, your designated safeguarding lead, and governors or trustees, who provide oversight and challenge.
It’s worth saying plainly: this doesn’t need to be, and usually shouldn’t be, whoever is most comfortable with technology. It needs to be someone with the standing to make decisions and the time to follow through on them.
Why this one matters more than it looks
Digital leadership and governance rarely feels urgent in the way a cyber incident does. That’s exactly why it’s worth getting right early. Every other standard in this series works better, and costs less to maintain, when there’s a named person keeping track of what your school actually has and why.
Our approach
We won’t tell you that you need a full digital strategy rewrite if what’s actually missing is one named person and a basic spreadsheet. Most schools have more of this in place than they think, just spread across people’s heads rather than written down. Our job is to help you get it written down in the right order, starting with whoever’s accountable, not to make it sound bigger than it is. We treat this review as forward-looking, not a line-by-line audit of everything you’ve bought before. It’s there to help you plan for what’s coming, not to catch you out on what’s already in place.
Guidance referenced is current as of August 2026. Always check GOV.UK for the latest version.
Start with one question: Who is our named SLT digital lead? Then ask whether your contracts, assets and information assets are recorded and current, and whether digital technology is included in your continuity planning.
