An Apex Insurance Brokers publication — 2026 Edition
Risk assessment in an independent school is no longer a single document or a single conversation. It is a layered set of obligations — statutory, regulatory, contractual, insurer-driven — that runs through every part of the school’s life. Safeguarding sits at the centre, but it touches everything around it: the Single Central Record, the off-site trip, the boarding house, the international pupil’s host arrangements, the online filtering set-up, the lithium battery a student brings on the STEM trip to Geneva.
This framework is the broker’s-eye view of how the major risk-assessment regimes connect. It is not a substitute for the school’s own safeguarding policies, KCSIE-compliant procedures, or specialist legal advice. What it provides is a working map — the structures you should have in place, the regulators behind each, and the conversations a senior leadership team should be having before the next inspection cycle, the next external trip, or the next intake of international pupils.
This is the operational counterpart to our Independent School Insurance Renewal Checklist — that document covers the cover; this one covers the operations the cover responds to.
— The team at Apex Insurance Brokers, Bristol
Why this chapter matters. The SCR is the most-inspected document in any independent school. The ISI walks in expecting it to be perfect, and an unmet finding here is rarely a quick fix.
The Single Central Record is required by Schedule 2 of the Education (Independent School Standards) Regulations 2014. The Schedule specifies the categories of person who must appear on the SCR and the checks that must be evidenced for each. The ISI inspects compliance under the safeguarding strand of its framework.
The categories include:
The SCR is not a static document. It must be updated when new staff arrive, when checks expire, when roles change. The ISI expects it to be current on the day of inspection — not retrospectively reconstructed.
For each person, the SCR must record evidence of:
The detail of each check — date of issue, certificate number where applicable, who verified the document, retention of supporting evidence — should be recorded.
A Section 128 direction under the Education and Skills Act 2008 prohibits an individual from holding certain management positions in independent schools. The TRA maintains the central register. Schools must check the TRA prohibition list and Section 128 direction list before appointing to any management role. This is a separate check from the DBS — it does not appear on a DBS certificate.
The check is straightforward — typically a database lookup via the TRA secure access — but it is often missed for non-teaching senior appointments (heads of boarding, finance directors, business managers).
Original documents or certified copies should be retained for the duration of employment and for a defined period afterwards. The GDPR principle of data minimisation interacts here — the school must retain evidence of the check having been made, but generally should not retain the documents themselves indefinitely. Practice varies; the ISI expects the school to have a documented retention policy and to follow it.
[Diagram: SCR structure. Central node “Single Central Record” with spokes to the categories of person (teaching, non-teaching, supply, volunteers, contractors, proprietors, boarding household) and to the check types (identity, DBS, barred list, prohibition, S128, qualifications, references, overseas). Annotation: “Each spoke is independently evidenced. The SCR proves the matrix.”]
[Common mistake call-out — “Adding a member of staff to the SCR with ‘check pending’ against one or more required fields. A pending check is not a check. If a person is in role and a required check is incomplete, the school has an unmet standard from day one. Resolve before commencement, not after.”]
[Broker’s view sidebar — “We have had two independent schools in the last twelve months whose SCR was the deciding issue in an abuse and molestation underwriter’s view of the risk. In one case it was missing prohibition checks for two long-serving teachers (caught up and rectified); in the other, the SCR was meticulous and the underwriter widened cover as a result. The document is operational. It is also commercial.”]
Why this chapter matters. KCSIE is updated annually in September. The 2024 update is the working version for the 2025–26 academic year, and its changes are non-trivial.
‘Keeping Children Safe in Education’ (KCSIE) is the DfE’s statutory safeguarding guidance for schools and colleges in England. It is updated annually, typically published in early September for the start of the academic year. Independent schools must “have regard to” the guidance — in practice, comply with it.
KCSIE is divided into five parts:
Every member of staff must read Part 1 at the start of each academic year. Schools commonly evidence this through a signed acknowledgement — paper or electronic — recorded in the staff member’s personnel file. The DSL or safeguarding administrator typically tracks completion.
Annual refresher briefings — covering the key changes in the latest KCSIE update — are good practice and increasingly expected.
The Designated Safeguarding Lead (DSL) is the senior member of staff with responsibility for safeguarding. KCSIE requires:
For boarding schools, DSL availability outside school hours is expected. For schools with multiple sites or significant size, multiple deputies are usually necessary.
KCSIE 2021 introduced (and subsequent versions have reinforced) the concept of low-level concerns — concerns about adult conduct that do not meet the threshold for an allegation but should be recorded. The framework was sharpened following the Soham review-era guidance and the more recent Whyte-related cases on patterns of inappropriate behaviour going unrecorded.
A low-level concerns log is now expected. Concerns are recorded centrally, reviewed periodically, and tracked for patterns. The DSL and the Head share visibility.
Where an allegation is made against a member of staff that meets the harm threshold, KCSIE Part 4 sets out the process — including notification to the LADO (Local Authority Designated Officer), engagement of police where appropriate, suspension considerations, and the management of the investigation. The school’s policy should mirror Part 4 closely.
Part 5 sets out the school’s responsibilities around child-on-child sexual violence and harassment — particularly following the Everyone’s Invited revelations in 2021 and the subsequent Ofsted review. The expectation is that schools take a “zero-tolerance” approach, with clear policies on reporting, response, and pupil education.
The school’s safeguarding policy itself should be reviewed annually (KCSIE expectation), should be on the school’s website, and should be in a form readable by parents. It should incorporate:
[Flow: KCSIE 2024 implementation cycle. → Read by all staff at start of year → DSL training current → policy updated annually → low-level concerns logged → allegations managed under Part 4 → review at termly safeguarding meeting → reported to governors at full board annually.]
[Broker’s view sidebar — “When abuse and molestation underwriters ask ‘is your safeguarding policy KCSIE-compliant?’, they do not want the policy. They want the documented evidence that the policy is operated — Part 1 acknowledgement records, low-level concerns log, DSL training certificates, the safeguarding meeting minutes. Operate as well as document.”]
Why this chapter matters. Off-site activities are where pupils are most at risk and where school risk assessment is most variable in quality. The framework matters as much as any individual document.
Off-site activity risk assessment operates on three levels:
A school that holds only a generic risk assessment (“class trip to museum”) and not the specific (this museum, this Tuesday, this Year 8 group of 28) is exposed. A school that has the specific but no system for dynamic on-the-day adjustment is exposed too.
The Outdoor Education Advisers’ Panel (OEAP) publishes the National Guidance for the Management of Outdoor Learning, Off-Site Visits and Learning Outside the Classroom. It is the authoritative reference for English schools.
OEAP National Guidance covers: the visit leader role, EVCs (Educational Visit Co-ordinators) in schools, planning, approval routes, the visit pack, parental consent, and the response to incidents. Independent schools should have an EVC role and should follow OEAP-aligned procedures.
Adventurous activities — caving, climbing, watersports above a certain threshold — fall under the Adventure Activities Licensing Authority (AALA) regime, regulated under the Activity Centres (Young Persons’ Safety) Act 1995. Where the school commissions a third-party provider for an activity within scope, the provider must hold a current AALA licence.
Schools should verify the AALA licence directly via the regulator’s published register — not by accepting the provider’s certificate at face value.
Some local authorities operate the EVOLVE system — a database for school visit planning, approval and risk assessment. Independent schools generally do not use EVOLVE but should have an internal system serving the same function. The principle is the same: a centralised record of trips, approval levels, risk assessments and post-trip review.
Residential trips carry specific safeguarding exposure — pupils overnight, staff in loco parentis 24 hours, mixed dynamics. OEAP National Guidance recommends staff ratios appropriate to the cohort, with 2:1 (two staff per accommodation unit) commonly the boarding-equivalent minimum and higher ratios for younger pupils and SEND cohorts.
Swimming, paddling, watersports — all carry drowning risk. The relevant guidance includes the Royal Lifesaving Society UK (RLSS UK) standards, NPLQ (National Pool Lifeguard Qualification) for pool-side staff, and OEAP guidance on open water activities. Adult-to-pupil ratios, lifeguard provision and supervisory competence should be assessed and documented.
Ski trips combine high-altitude, high-speed activity, foreign jurisdiction, mountain medicine, and overnight residential supervision. Ski trip risk assessment is a specialist exercise. The school should engage with the trip provider’s risk management — a reputable ski trip operator will share its risk assessment framework — and add the school-specific dimension (cohort, supervisory ratios, communication plan, parental consent, medical declaration).
[Hierarchy diagram: trip risk assessment. → Generic RA (activity type, recurring) / Specific RA (this trip, signed off before departure) / Dynamic RA (day-of, by leader on ground) / Post-trip review (lessons captured back into generic). Annotation: “The four together. Not any one in isolation.”]
[Common mistake call-out — “Sending a residential trip with a copy of last year’s risk assessment marked up in pen. A specific risk assessment is a fresh document for this trip — not an annotation on a previous one. The audit trail matters as much as the content.”]
[Broker’s view sidebar — “The trips that go badly are rarely the ambitious ones (Alps, expeditions, fieldwork). They are the routine ones — the museum, the local sports fixture, the cathedral visit — where the risk assessment was treated as paperwork. The serious trips get serious attention. Apply the same discipline to the day trip.”]
Why this chapter matters. Pupil mental health is now a defined safeguarding and Equality Act dimension. Schools without a documented framework are increasingly exposed.
The DfE / DHSC framework on mental health in schools — including the senior mental health lead role expectations, designated supervised mental health lead training, and the Mental Health Support Teams (MHST) programme — has materially developed since 2020. Independent schools are not required to participate in the MHST programme but commonly engage with equivalent provision.
The expectation (DfE-promoted, increasingly an inspector touchpoint) is that every school has a senior mental health lead — a named member of staff with strategic responsibility for the school’s mental health and wellbeing approach. The DfE provides training and quality-assured providers for this role.
For independent schools, the role is commonly held by a deputy head, the head of pastoral care, or the head of wellbeing. The role is distinct from the DSL — though the two roles work closely together.
Emotional Literacy Support Assistants (ELSAs) — staff trained in evidence-based emotional support — are a model used in some schools to provide tier-1 pastoral intervention. Other models include the iThrive framework, school counsellors, in-house psychology provision, and externally-commissioned therapy services.
The pastoral provision matters operationally and from a safeguarding view: pupils with unmet mental health needs are at higher risk; pupils receiving appropriate support are better protected.
The Equality Act 2010 imposes a duty on schools (as service providers and as education providers) to make reasonable adjustments for pupils with disabilities — including mental health conditions where the statutory threshold is met. Reasonable adjustments may include:
Failure to make reasonable adjustments where required can result in disability discrimination claims through the SEND Tribunal (for state-funded matters) or in civil claims for independent schools.
The Joint Council for Qualifications (JCQ) publishes the Access Arrangements and Reasonable Adjustments guidance — the annual JCQ regulations governing how exam boards permit adjustments to standard exam conditions for pupils with specific needs. The SENCO (Special Educational Needs Co-ordinator) and the exam officer manage the process.
Access arrangements interact with safeguarding where the underlying need is, for example, a mental health condition affecting examination performance. The school’s processes should ensure that safeguarding-relevant information is appropriately considered without breaching the pupil’s data protection rights.
When mandatory reporting legislation comes into force (see the discussion in the companion renewal checklist), disclosures during pastoral or mental health support may fall within scope. Schools should consider — with safeguarding advice — how their pastoral provision interacts with reporting obligations.
[Framework diagram: mental health support tiers in a school. Tier 1 (universal — assemblies, PSHE, ELSA-style support) / Tier 2 (targeted — school counsellor, pastoral one-to-one) / Tier 3 (specialist — external therapy, CAMHS, in-school psychology) / Tier 4 (clinical — hospital-based). Annotation: “Most pupils stay at Tier 1. The school’s policy and capacity should describe all four.”]
[Broker’s view sidebar — “Pupil mental health is increasingly the trigger for parental complaint, regulatory engagement and (occasionally) civil claim. The schools that handle it best are the ones with named role responsibility, documented pathways and external provision contracted in. The schools that struggle are the ones where ‘pastoral care’ is everyone’s job and no one’s specifically.”]
Why this chapter matters. International recruitment is a major income stream for many independent schools and a regulated activity. Sponsor licence breaches are a serious matter.
Independent schools recruiting non-British pupils requiring a visa to study in the UK must hold a UKVI sponsor licence — specifically under the Sponsor Licence Sub-Tier ‘Children’ within the Student Route (formerly Tier 4). The Home Office administers the regime.
Holding a sponsor licence requires the school to meet defined compliance duties:
The school is rated by the Home Office (A-rated or B-rated). A downgrade or revocation is a serious matter for any school dependent on international recruitment.
A Confirmation of Acceptance for Studies is the electronic record issued by the school (as sponsor) that allows the pupil to apply for a student visa. CAS issuance requires verification of:
Issuing a CAS to an ineligible pupil is a serious compliance breach. The school’s admissions and compliance staff should follow a documented process aligned to current Home Office guidance.
The Immigration Act 2014 imposed a Right to Rent check obligation on residential landlords, including (under defined circumstances) on those providing accommodation to children. The position for international student host families is nuanced — host parents accepting paid placement of international pupils may need to consider whether their arrangement is in scope.
For schools placing pupils with host families:
The Council of British International Schools (COBIS) publishes guidance for British international schools and for UK schools with significant international cohorts. The British Schools Overseas (BSO) inspection regime is the equivalent of ISI for British schools operating overseas.
UK independent schools recruiting from specific international markets often draw on COBIS guidance for host family management, pupil welfare, and international transition support.
International pupils boarding in a UK independent school fall under the same NMS for Boarding Schools regime as domestic boarders (see Chapter 6) — with additional considerations around:
[Process: sponsor licence operation. Application to Home Office → A-rating granted → CAS issuance (per pupil) → monitoring (attendance, address, status) → annual basic compliance assessment → Home Office audit (periodic). Each step: documented, evidenced, dated.]
[Common mistake call-out — “Issuing a CAS before all eligibility checks are complete, on the basis that the pupil ‘is starting next term anyway’. The compliance error is created at CAS issuance; the Home Office audit will find it years later. CAS issuance must be the end of the checking process, not the start.”]
[Broker’s view sidebar — “We have insured schools where a sponsor licence revocation would close 30% of the income overnight. The cover stack does not protect against that risk — what protects against it is the compliance discipline. Schools dependent on international recruitment should engage immigration advice annually, not just at sponsor licence renewal.”]
Why this chapter matters. The National Minimum Standards for Boarding Schools 2022 reset expectations across the boarding sector. Three years on, inspectors expect full embedding.
The National Minimum Standards for Boarding Schools 2022 (DfE) sets the regulatory floor for boarding provision in independent schools. The standards cover:
The standards are inspected by Ofsted (for state boarding) or by ISI (for independent boarding) under their respective frameworks. An “unmet” finding on an NMS standard is a serious matter.
Houseparents (housemasters, housemistresses, residential tutors) are the front-line safeguarding role in boarding. The NMS sets expectations around:
Boarding schools must have appropriate medical provision — typically a school nurse or a contracted medical service — and clear policies on medication storage, administration and parental consent.
The CQC (Care Quality Commission) does not normally regulate boarding school medical provision unless it crosses into regulated activity (e.g. provision of certain therapeutic services). The line is sometimes blurred — particularly for schools providing significant mental health or specialist support — and worth getting clarified for an individual school.
The NMS requires boarders to have means of contact with their families. The school’s policy should address:
A boarding school is in loco parentis for the entirety of the boarder’s residence. The duty of care is 24 hours. This has implications for:
ISI inspects boarding under its boarding-specific framework, with boarders’ welfare a key theme. An ISI boarding inspection typically involves pupil voice (interviews with boarders), houseparent interviews, accommodation walk-through, policy review and documentation audit.
[Compliance map: NMS 2022 standards. Statement of principles → welfare → accommodation → healthcare → catering → activities → staffing → management → additional needs. Annotation: each linked to an evidence source — policy, log, training record, inspection report.]
[Broker’s view sidebar — “Boarding is the most cover-intensive part of any independent school. The premises exposure is overnight; the safeguarding exposure is 24-hour; the duty of care is the same as a residential institution. We see boarding schools with cover priced like day schools more often than we should. It is one of the first things to check at renewal.”]
Why this chapter matters. Online and digital risk now sit alongside in-person safeguarding. The Prevent Duty is statutory; the rest is good practice and increasingly inspected.
Section 26 of the Counter-Terrorism and Security Act 2015 imposes the Prevent Duty on specified authorities — including schools — to have “due regard to the need to prevent people from being drawn into terrorism”.
In practice for schools this means:
The Prevent Duty obligations interact with online safety filtering and monitoring. The DfE’s filtering and monitoring guidance (and the KCSIE 2024 update) sets out expectations:
The UK Safer Internet Centre publishes filtering provider standards (the SWGfL accreditation scheme is one route). Many independent schools use commercial filtering / monitoring solutions; the choice should be informed by the school’s specific needs and reviewed periodically.
Bullying — including bullying that targets protected characteristics — engages the Equality Act 2010 and the school’s broader safeguarding framework. The Equality Act imposes the public sector equality duty on state-funded schools; independent schools are subject to the Act as service providers and as employers.
The school’s anti-bullying policy should:
The Protection from Harassment Act 1997 provides for civil and criminal remedies in respect of a course of conduct amounting to harassment. It can apply to school contexts — particularly where bullying conduct extends online and creates a course of conduct meeting the statutory threshold.
For schools, the practical relevance is that a serious bullying matter may engage criminal as well as safeguarding processes. Police engagement decisions should be made carefully and (where the conduct involves pupils as both alleged perpetrator and victim) with safeguarding overlay.
[Process map: Prevent Duty operation. Lead identified → staff trained → filtering in place → monitoring active → referral routes documented → Channel engagement where appropriate → annual review. Annotation: “Prevent is operational. The policy alone is not compliance.”]
[Common mistake call-out — “Treating filtering as a ‘set up and forget’ IT decision. Filtering must be reviewed, monitored for effectiveness, and adjusted as new platforms and risks emerge. A filter installed in 2020 with no review is unlikely to handle 2026 risks.”]
Why this chapter matters. International trips involve regulatory and practical considerations beyond the UK trip framework. Three areas catch schools out most often.
The Foreign, Commonwealth and Development Office (FCDO) publishes country-specific travel advice covering safety, entry requirements, local laws and health risks. School trip planners should:
Schools should be aware that travel insurance may not respond to claims arising from travel against FCDO advice. The school’s cover should be specifically tested against this.
Post-Brexit, the Global Health Insurance Card (GHIC) replaces the European Health Insurance Card (EHIC) for UK travellers in the EU and EEA. The card provides access to state-provided healthcare on the same basis as a local resident.
For school trips to EU / EEA destinations:
Trips to non-EU / EEA destinations rely on travel insurance plus the destination country’s healthcare regime — preparation here is more involved.
Some schools register significant trips with the British Embassy or Consulate in the destination country — particularly for trips to higher-risk destinations or larger groups. The FCDO maintains the GOV.UK travel advice but does not require registration in normal circumstances. The decision is the school’s, informed by trip risk assessment.
The International Air Transport Association (IATA) Dangerous Goods Regulations (DGR) — most recently extensively updated in 2018 and refined since — impose specific restrictions on the air transport of dangerous goods, including lithium batteries.
The implications for school trips, particularly STEM trips, robotics tournaments and university visits:
A robotics team travelling to an international competition with battery-powered equipment must plan transport carefully — and may need to ship some equipment via a specialist freight provider rather than as baggage.
For overseas trips of any complexity, the trip leader’s competence is a defining risk control. The OEAP guidance, the school’s EVC oversight, and (where applicable) the use of School Travel Forum (STF) member operators all contribute.
The STF’s Learning Outside the Classroom Quality Badge is widely recognised as a marker of provider quality. Insurer questionnaires increasingly ask about provider vetting.
The trip pack should include:
A documented incident response plan, rehearsed before departure, is the operational difference between a managed incident and an improvised one.
[Diagram: IATA lithium battery decision tree. Battery type → watt-hour rating → quantity → cabin / checked / freight only. Plus: airline-specific rules to verify. Annotation: “Plan transport at trip booking, not at airport check-in.”]
[Broker’s view sidebar — “The school overseas trips that go wrong are not the high-altitude expeditions or the watersports trips — those get serious risk assessment because everyone knows they need it. They are the language exchanges, the cultural visits, the cathedral tours, where everyone assumed the risk was low. Apply expedition-grade risk assessment to ordinary trips too.”]
[Common mistake call-out — “Booking a school trip and not re-checking FCDO advice in the week before departure. Travel advice can change quickly. The pre-departure check is the cheapest insurance you can buy.”]
This framework is most useful as a working document for the senior leadership team. Print it, mark up the gaps against your current operational state, and bring the marked-up document to the next safeguarding committee, the next governors’ meeting, and the next renewal conversation with your broker. The chapters do not need to be tackled all at once — even one chapter, properly addressed, materially strengthens the school.
If you do not currently have a broker familiar with the independent school sector, or if you would like an external view on your insurance arrangements against the operational reality, we are happy to talk. No fee for the conversation; no obligation; and we will tell you honestly if your current arrangements look sensible to us.
Apex Insurance Brokers Ltd is a UK insurance broker, Bristol-based. We work with educational institutions across the South West and nationally — independent schools, multi-academy trusts, single-academy trusts and higher education providers. We have been authorised by the Financial Conduct Authority since 2014.
Contact us: - Telephone: 0117 325 0027 - Email: info@apexinsurancebrokers.co.uk - Web: apexinsurancebrokers.co.uk
Trading address: QCS, 53 Queen Charlotte Street, Bristol BS1 4HQ Registered office: c/o Westcan, 5 Anglo Office Park, Bristol BS15 1NT
General guidance only — not regulated advice. Always consult your broker on your specific cover and circumstances. Apex Insurance Brokers Limited, FCA FRN 724952, Companies House 07014570.
This guide is published by Apex Insurance Brokers Ltd, authorised and regulated by the Financial Conduct Authority under firm reference 724952. You can verify our regulatory status on the FCA register at register.fca.org.uk.
This guide is general information based on our experience as an insurance broker. It is not legal, safeguarding, regulatory or compliance advice and it is not a personal recommendation as to any specific insurance product or operational arrangement. Any decision about safeguarding policy, compliance practice or insurance cover should be taken having regard to your individual school’s circumstances and (where appropriate) advice from your own legal, safeguarding and compliance advisors. We do not undertake to update this guide to reflect changes in regulation, market practice or law after the version date above.
Apex Insurance Brokers Ltd accepts no liability for any loss arising from reliance on the contents of this guide.
Reviewed by: Matt Bartlett, Director Last reviewed: May 2026
— End of guide —
Apex Insurance Brokers serves UK professional services firms and commercial businesses. Call 0117 325 0027, email hello@apexinsurancebrokers.co.uk, or request a quotation.
Get a quote