School site security and access control: a practical guide

A school site is safe when you know who is on it, why they are there and who is with them. A fence and a gate help only if people use them the same way every day.

Four things work together: the boundary, the front desk, the badge and the end-of-day handover. The gaps appear in daily habits, such as a side gate propped open for a delivery.

The Department for Education (DfE) in England sets a plain test in its school and college security guidance. Procedures should stop anyone entering the buildings unacknowledged. It works as a test on any campus.

Your risks depend on your city and your campus. Write a short security risk assessment for your site and name an owner. Your designated safeguarding lead (DSL) and business manager can share the job and review it each year.

Aim for one main way in for visitors, and make it lead to a staffed desk. Visitors should reach reception before any corridor or classroom.

Keep other gates locked during lessons. Open them only at set times, such as pick-up, with a named person on duty.

Many schools use a contracted guard at the gate. Brief that person as you brief teachers: who is expected today, what to ask and who to call. Non-teaching staff meet strangers first, so they need safeguarding training too.

Walk the boundary once a term with this checklist:

• Side gates and fire doors close and lock, and none is propped open
• Visitors cannot reach classrooms without passing reception
• Fences and gates have no gap a child could use to leave
• The gate guard has today's visitor list and the office phone number

Every visitor reports to reception first, where the desk learns why they have come and signs them in. The DfE guidance also says visitors should not wander around alone.

The National Society for the Prevention of Cruelty to Children (NSPCC) advises you to check each visitor's identification (ID) and record their name, organisation, host and times in and out. See its page on school visitors.

Keeping children safe in education (KCSIE) 2026, the statutory guidance for schools in England, splits visitors in two. Professional visitors get an ID check and confirmation of their checks. Relatives at a sports day need no checks, and the Head uses judgement about escorts.

Treat the register as personal data, keep it secure and check local law on how long to keep it. The article on safeguarding visitors, contractors and volunteers covers supervision levels.

• Full name and organisation
• Who they are visiting, and why
• ID seen, yes or no
• Time in and time out
• Supervision level: escorted, supervised or unaccompanied

A badge lets any adult on site see who someone is at a glance. It works only if everyone wears one, including the Head and long-term volunteers. The DfE guidance says anyone without a badge should be challenged.

Make visitor badges look different from staff badges, and print the date on them so they expire that day. Colour them by supervision level, so a teacher can tell an escorted visitor from a checked one.

Count the badges back in after the last pick-up. A missing badge means a visitor may still be on site, or left without signing out. Find out which before you lock up.

• Staff: photo, name and role, worn where people can see it
• Contractors: photo badge with an end date, issued after checks
• Visitors: dated, a different colour, handed back at the exit
• Another organisation's ID card never replaces your own badge
• A lost badge is reported the same day and the card is switched off

Start at admission. Ask parents for the names, photos and phone numbers of every adult who may collect their child. In many international schools that includes drivers, nannies and relatives.

KCSIE 2026 asks schools to hold more than one emergency contact number for each pupil where reasonably possible. Review the list each term, and whenever a family reports a change.

Handle one-off changes through a channel you control, such as a call to the office or the school app. A note carried by the child or the driver is not enough. Buses need the same list, as the guide on safeguarding on school transport and buses explains.

Give the gate team a list for each class. They match each adult to the list and ask for ID when they do not know the person. Each entry holds:

• The child's name and class
• Each authorised adult's name, relationship, photo and phone number
• Any adult who must not collect the child, with the paperwork behind it
• The date a parent last confirmed the list

Custody disputes reach the school gate sooner or later. Your staff should not decide who is right. They follow the paperwork the school holds and call the DSL.

Ask parents for a copy of any court order or written agreement at admission, and again when things change. Give the gate team the instruction and keep the private detail in the file. Laws differ by country, so ask local counsel what your school must follow.

Agree in advance what staff do when an adult is not on the list, seems unwell or drunk, or the child is frightened. They keep the child with a member of staff, do not argue at the gate, and call the DSL.

If a child is in immediate danger, call your local emergency services first. Then follow your school's child protection procedure and tell the DSL the same day.

Many staff hesitate to challenge a stranger because it feels rude. NSPCC Learning says staff should politely challenge a visitor with no badge. Visitors with good reasons will not mind.

If an adult becomes angry or threatening, staff step back and move children away. They tell the office and call local emergency services if anyone is in danger. They report the incident to the DSL the same day, and your lockdown procedure covers what happens next.

Give staff the exact words, and let them practise in pairs. Short phrases work best:

• "Good morning. Can I help you? Who are you here to see?"
• "I can't see a badge. Could you show me where you signed in?"
• "I don't have you on the list for this child. Please wait here while I call a parent."
• "I can't let you through without signing in. I will ask the Head to speak to you."

Plans on paper miss things, so test them. Each month, a senior leader tries a side gate, spot-checks five badges and compares one class's collection list with who collected.

Record every near miss, such as a gate left open or a child released to the wrong adult. Report it to the DSL and review the rule that failed.

Accreditation teams and inspectors differ in what they ask for, so check your own framework's current standards. The International Task Force on Child Protection (ITFCP) and the Council of International Schools (CIS) publish child protection resources for international schools. Keep these records ready:

• Your written site risk assessment, with an owner and a review date
• Visitor registers for the last year
• Current collection lists and copies of any court orders
• Guard briefing records and the security contract clauses
• Badge logs, monthly check results and the near-miss log, with actions taken