04 Jun Schools as charities: legal and regulatory update Fri
07 Jun The New Art of Headship Tue
11 Jun Introduction to VAT for schools Tue
18 Jun Questions that Heads should be asking their team about VAT policy and detail Tue
18 Jun So you want to be a bursar? Tue
25 Jun Holiday Pay Update Fri
28 Jun Gender Questioning Pupils - unpacking the guidance, law and best practice Fri
28 Jun VAT on school fees update More Upcoming Events
Welcome to ISBA’s Weekly Bulletin 8. These bulletins will be sent to ISBA members regularly with the very latest on operational and regulatory issues impacting independent schools. If you have a question you would like us to answer in this bulletin please email us or call us on 01256 330369.
If you missed our last bulletin it is available here.
A handful of schools which use iSAMS have been in touch with the company to report cyber attack incidents and, subsequently, we would like to share the following information with ISBA members.
iSAMs wish to make it clear the attacks were not caused by, or related to, any vulnerability in iSAMS.
The two types of attack being reported are:
- Cyber criminals emailing parents requesting payment for fees using email templates that are branded with the school’s crest and email addresses that appear to be from the school. The email addresses were not obtained from iSAMS and the communications were not sent from within iSAMS. This is a targeted phishing attack of parents during a time when schools are typically doing their bill runs.
- Compromised SSO accounts granting access to applications (including iSAMS) through phishing emails to school staff where 2FA was not enabled and access was gained via the Active Directory.
Important steps your school needs to action:
To ensure your iSAMS system is safe, please make sure that you have enabled iSAMS 2FA for all users.
Go to Control Panel > Authentication > Configuration > Require iSAMS Two-Factor Authentication Configuration.
This ensures all users will have 2FA fully configured, even if they have only ever logged in using a Trusted Network.
Learn more about 2FA here.
Train your staff (and parents) to spot phishing emails
Attackers are impersonating a school by creating domain names that are ever so slightly altered to escape most people’s notice. This can be done by replacing letters in a legitimate email domain (for example, abcschool.com becoming abschool.com) or adding a letter that would be difficult to spot at first glance (think @abcschool.com instead of @abcschoool.com).
This is done with the intention of tricking users into giving away personal or sensitive information, data, or to gain control of the staff members school account and resetting or even bypassing 2FA. For example: one of your staff members receives an email with the subject line "Reset your password" or “You have a new voicemail” from an impersonated domain address, by clicking on this link attackers are then able to gain access.
Here are a few ways your staff members can detect a phishing email:
- The message is sent from a public email domain. No legitimate organisation will send emails from an address that ends '@gmail.com'.
- The domain name is misspelt.
- The email is poorly written.
- It includes suspicious attachments or links.
- The message creates a sense of urgency.
Tips for staff members:
- Always check the email address you’re receiving mail from to ensure it is genuine.
- Never download an email attachment or click on a link from an unrecognised email address.
- Never open a suspicious email. Contact somebody within your organisation to check its validity.
- Never write down your passwords.
- Do not use personal devices – school-issued laptops and phones should all be set to the same security standards.
- Report any suspicious emails to your iSAMS system Administrator
Please also refer to iSAMS’ cyber security guide that offers some guidance around some of the common cyber scams in schools and how to avoid them.
If you suspect your system or email account has been compromised report it immediately to iSAMS’ support centre at helpdesk@isams.com or raise a ticket here.
Source: iSAMS
Portable appliance testing (PAT) is the examination of electrical appliances and equipment to ensure they are safe to use.
There are many myths about PAT but you can use the Health & Safety Executive’s (HSE) frequently asked questions to find the key facts about the inspection and testing of portable electrical equipment.
You can also download HSE’s leaflet ‘maintaining portable electric equipment in low-risk environments’. It sets out simple and sensible precautions you should take to prevent danger from portable or movable electrical equipment.
HSE's website also has general advice on electrical safety at work.
Source: HSE
Last year, ISC and associations worked with Planet Mark on a sustainability report that mapped progress being made in the sector and gave advice on steps schools could take.
Measuring your school’s carbon footprint is a major part of any sustainability strategy and as part of its joint work, Planet Mark will offer ISC schools a discount on their carbon certification services. Planet Mark will offer a 10% discount for ISC schools to get their first year of Planet Mark Certification – schools will be able to claim this offer by enquiring here and quoting the code: INDEPENDENT10 (can write in message box).
The ISC website has resources to support schools on sustainability. These now include Planet Mark guides on:
- Water use and reduction
- Waste output and reduction
- Travel
- Carbon neutral vs net zero
Source: ISC
Please note the ISBA advice and guidance email address has now changed to: adviceatISBA@theisba.org.uk
Do you produce an annual review of food costs for benchmarking?
ISBA’s reference library document Catering Budget - Forecast Benchmarks for 2024-2025 contains a useful summary of food inflation, feeding costs per head, internal issues, labour costs and management fees.
Please can you advise on the exact legal requirements (and where we can reference them from) for the different ‘parts’ and ‘annexes’ of KCSiE that school governors have to read?
It is a great question particularly as KCSiE differentiates between “should” (unless there is good reason) and “must” (a legal requirement).
KCSiE on page 23 gives the “Legislation and the law”:
78. Governing bodies and proprietors have a strategic leadership responsibility for their school or college’s safeguarding arrangements and must ensure that they comply with their duties under legislation. They must have regard to this guidance, ensuring policies, procedures and training in their schools or colleges are effective and comply with the law at all times
and KCSiE states on page 4:
- This statutory guidance should be read and followed by:
- governing bodies of maintained schools (including maintained nursery schools) and colleges which includes providers of post-16 Education as set out in the Apprenticeships, Skills, Children and Learning Act 2009 (as amended): 16-19 Academies, Special Post-16 institutions and Independent Training Providers
- proprietors of independent schools (including academies, free schools and alternative provision academies) and non-maintained special schools. In the case of academies, free schools and alternative provision academies, the proprietor will be the academy trust
So to be compliant I would suggest all governors read and understand:
- Part one: safeguarding information for all staff
- Part two: the management of safeguarding
- And where appropriate, given governors’ specific responsibilities: part three, part four and five.
It is also worth noting the importance of governors understanding their responsibilities and knowledge so they are able to “test and assure themselves”:
81. Governing bodies and proprietors should ensure that all governors and trustees receive appropriate safeguarding and child protection (including online) training at induction. This training should equip them with the knowledge to provide strategic challenge to test and assure themselves that the safeguarding policies and procedures in place in schools and colleges are effective and support the delivery of a robust whole school approach to safeguarding. Their training should be updated regularly.
82. Governing bodies and proprietors should be aware of their obligations under the Human Rights Act 1998, the Equality Act 2010, (including the Public Sector Equality Duty), and their local multi-agency safeguarding arrangements.
The issue of shared parental leave has been discussed at recent regional group meetings and we thought it worth highlighting again: can colleagues take several periods of Shared Parental Leave to maximise their leave and pay entitlements?
Yes (and we understand that there are advice forums, urging them to do so). Please refer to ISBA Weekly Bulletin 15 (29 June 2023) and the guidance note: Shared Parental Leave and Term Time Only Working.
Teachers on maternity leave are entitled to request up to three blocks of shared parental leave, these requests cannot be refused, assuming that the teacher is eligible to SPL and gives the required notice. This link is an example of the advice available to teachers.
We have worked with Farrer & Co to update our data retention guidelines for schools available here.
ISBA Annual Conference 2024 – Book Your Place Now
Bursars and their teams can book day delegate tickets at ISBA’s upcoming annual conference from 20 – 22 May 2024 at the ICC, Wales. We've discounted the price for any second or subsequent day delegate bookings for colleagues from the same school.
The conference offers a selection of professional development sessions for support staff to choose from, hosted by expert speakers who will share tips and advice on the latest issues affecting the independent school sector from financial planning, mergers and acquisitions, the new inspections framework, digital strategy, sustainability, HR (neurodiversity in the workplace, discrimination, flexible working and wellbeing), safeguarding, marketing and communications (and much more!). See the full programme and find out more about the ICC as a venue by listening to our podcast.
If you have an issue you’ve been grappling with for some time or one that has just popped up in your in-tray, this event will help.
You’ll also get to visit our largest exhibition yet of suppliers to the sector, network with peers opportunities plus get an opportunity to relax at our annual dinner hosted by popular comedian Marcus Brigstocke on Wednesday 22 May. We look forward to seeing you there.
Webinars
Details of the webinars in our professional development programme for the spring term are listed below and are available to book here. More webinars will be added to the spring term programme so please watch this space for more details each week.
If you missed any from the autumn term all of our free of charge webinars are recorded and are available to view in the multimedia section of the ISBA reference library.
- 19 March 2024 from 11.00-12.00 - Managing Health & Safety for School Lettings
An update on health & safety law for lettings – criminal and civil, and the factors to consider in managing health & safety for school lettings. The session will also include key information to request from the hirer and key information to provide to the hirer.
- 22 March 2024 from 14.00-15.00: Outsourcing Your Catering
Following on from our previous webinar, 'The benefits of in-house catering', Claire Long from Thomas Franks will offer her view on the benefits of outsourcing.
- 19 April 2024 from 11.00 -12.00: Pensions Update
Richard Soldan, Luke Hothersall and Andy Thompson from LCP will offer insight into the significant increase in the TPS contribution rate from 1 April referencing their experiences of projects that the LCP team are helping schools to undertake now, to mitigate those cost increases.
- 19 April 2024 from 14.00 – 15.00: So, You May Become Your School’s Sustainability Lead?
allmanhall address the key things you'll need to know and do if you're to take the lead on sustainability at your school.
- 26 April 2024 from 11.00 - 12.00: Treasury Management
Rathbones will explain a range of options available to manage and invest school income and cash holdings.
- 7 June 2024 from 11.00-12.00: The New Art of Headship
Russell Speirs will share the findings of RSAcademics’ recent Art of Headship Report, looking specifically at the changing nature of leadership in UK independent schools and what this means for bursars.
- 28 June 2024 from 11.00 - 12.00: VAT on School Fees Update
Kieran Smith from Crowe UK LLP will be drawing on his expertise to offer an update on VAT on school fees. More details will follow.
- 28 June 2024 from 14.00-15.00: Gender Questioning Pupils - Unpacking the Guidance, Law and Best Practice
James Garside from VWV will offer his insight into the current legal frameworks on gender questioning pupils and how to apply them in practice. The session will explore the [final] DfE guidance, law and current thinking to support and assist independent schools in navigating an area of legal and practical complexity.
So you Want to be a Bursar?
- Sessions 1 and 2 on Tuesday 18 June at 11.00 - 12.15 and 16.00 – 17.15
- Sessions 3 and 4 on Thursday 20 June at 11.00 - 12 noon and 16.00 – 17.00
This course is for those looking to become a bursar who are not currently working in the independent school sector as well as support staff in independent schools who have considerable administrative management experience and are looking to progress their career.
Online safer recruitment course
ISBA’s online Safer Recruitment course is available exclusively for our members, priced at £60 per person. Booking details are here and those attending may attend the self-paced course which lasts for approximately two to three hours depending on knowledge. The online course will benefit those new to recruiting, individuals selected to conduct interviews and require revision or a three yearly update.
The online course is designed to ensure school staff are able to safely recruit new staff and comply with safeguarding regulations, Keeping Children Safe in Education and of course, most importantly, ensuring that young people learn in a safe environment. The course includes a range of commissioned videos from experts in the safeguarding field, including legal expert David Smellie from Farrer & Co.
You will get a CPD certificate on completion of the course, and the content is suitable for all staff and governors involved in the recruitment and interview process.
We’d like to remind colleagues about the ISBA business directory in the ISBA reference library which allows schools to search for specialist suppliers across the UK quickly and easily. The directory offers suppliers to the sector the chance to demonstrate the commitment they have to quality service to independent schools and to highlight any special offers or discounts they may have for ISBA member schools. The directory is fully searchable by business type, region or by location of the supplier. We do hope you find an opportunity to make use of the directory and that it will help you find the right solutions for your school.
ISBA has weekly podcasts designed to be easy ‘on-the-go’ listening via Spotify, Buzzsprout, Apple and the multimedia section of the ISBA website. Recent episodes have included:
- Is flexible working the key to boosting performance and teacher wellbeing?
- Budget updates, BSA/ISBA conference, allergies and flexible working
- Getting to know the ICC Wales with Danielle Bounds
- Questions answered about gender questioning guidance
- VAT survey, mobile phone guidance, Protect Duty consultation and member questions
- Martyn’s Law and what it means for schools
- Government consultations, cyber security guidance and member questions
- Copyright, budgets and energy updates
- Introduction and updates from Rob Pizii, ISBA’s new head of advice and guidance
- A Different Vision of Bursaring with Kathy Denton
Summer term regional group meetings will take place as follows:
- 16 April at 9.30am – Welsh, virtual meeting
- 18 April at 9.15am – South West, virtual meeting
- 19 April at 2pm – Kent, face-to-face meeting, Frewen College
- 24 April at 10am – Southern, face-to-face meeting, Windlesham House
- 13 June at 10am – Solent, face-to-face meeting, Princes Mead
- 16 June at 9.30am – Welsh, virtual meeting
- 17 June, time TBC – Surrey, face-to-face, Daneshill
- 19 June at 10am – EABA, face-to-face meeting, Homerton College