The situation
A young student was allegedly exposed to inappropriate images while using a school computer. The matter raised serious questions about the adequacy of the school’s internet safety practices and whether reasonable steps had been taken to protect students from harmful content.
Details in this case study have been altered to protect client confidentiality. The core facts, forensic methodology, and outcomes are accurate.
What we found
NDF’s assessment of the school’s internet safety controls revealed significant gaps:
- Search blocking (such as SafeSearch enforcement) was either not enabled or not properly configured
- Network-level filtering that could have blocked access to inappropriate content was inadequate
- Whitelist and blacklist policies were insufficient to prevent a student from reaching harmful material
- Physical supervision measures, including the positioning of monitors for teacher visibility, were not adequate
Any one of these controls, properly implemented, could have prevented the incident.
How we responded
NDF conducted a comprehensive assessment of the school’s internet safety infrastructure, examining:
- Search engine safety settings and whether they were enforced at a network level
- Network blocking and filtering configurations
- Content whitelist and blacklist policies
- Physical environment factors, including monitor placement and supervision arrangements
The assessment was documented in a format suitable for use in legal proceedings, clearly identifying which controls were absent and how their presence would have changed the outcome.
The outcome
The evidence demonstrated that the school had not implemented reasonable internet safety measures that were readily available and widely adopted in educational settings. The school settled the matter and established a trust fund for the affected student.
Lessons for similar organisations
- Defence in depth applies to student safety. No single control is sufficient. Schools need layered protections including search filtering, network blocking, content policies, and physical supervision.
- SafeSearch enforcement is a baseline, not an option. Enforcing safe search at the network level is a straightforward measure that every educational institution should have in place.
- Monitor positioning matters. Screens should be visible to supervising staff. Physical environment design is a safety control, not just a furniture decision.