School Policy Management: Guide for Business Managers

The school business manager at a maintained primary has a spreadsheet. Column A is policy names — 47 of them. Column B is supposed to be the last review date, but the last twelve rows are blank because those policies have not been reviewed since the previous business manager left eighteen months ago. Column C is "next review due," which is based on Column B plus one year, which means twelve of those cells contain errors too. Ofsted is visiting in six weeks.

Managing school policies has become genuinely complex. The statutory requirement landscape has shifted significantly — the DfE has withdrawn some historical documents, updated others, and moved the authoritative guidance around enough that what your school followed three years ago may not be where the current requirement lives. Add multi-academy trust structures where some policies are centrally owned and others are school-specific, and the coordination challenge grows.

This guide covers what schools and MATs need to know about managing their policy obligations: what is statutory, what needs annual review, who owns what, and how to build a system that does not rely on one person's institutional memory.

Statutory Policies: What You Must Have and Where the Requirements Come From

The term "statutory policies" refers to policies that schools are legally required to have. The requirements come from multiple sources — primary legislation, statutory instruments, DfE guidance, and the school's funding agreement (for academies).

The DfE Maintained Schools Governance Guide and the Academy Trust Governance Guide are the current authoritative references for governance and policy obligations. Note: the DfE's earlier document "Statutory Policies for Schools and Academy Trusts" was withdrawn in March 2024 — if your school is still using that as a reference, you should update to the current governance guides.

Policies that must be published on the school website (maintained schools) include admissions arrangements, special educational needs and disability (SEND) information, pupil premium strategy, behaviour policy, and the equality objectives statement, among others. The requirement to publish on the website is separate from the requirement to have the policy — both apply.

Statutory policies for safeguarding are the most tightly regulated area. Schools must have a child protection and safeguarding policy aligned to the current edition of Keeping Children Safe in Education (KCSIE), which is updated annually by the DfE. A safeguarding policy that has not been reviewed against the current year's KCSIE is a compliance risk. Ofsted inspectors routinely check whether the policy reflects the current edition.

Policies for academies operate under the trust's funding agreement, articles of association, and the Academy Trust Handbook, as well as the same statutory requirements that apply to maintained schools. MATs often maintain a two-tier structure: trust-level policies (governance, finance, data protection) and school-level policies (behaviour, safeguarding, curriculum). Clarity about which tier owns each policy — and who reviews and approves each — is essential governance.

What Ofsted Actually Looks for in Policy Governance

Ofsted inspectors are not conducting a documentation audit — they are assessing the quality and effectiveness of leadership and governance. Policy governance comes into the Well-led and Safeguarding judgements most directly.

Under the current inspection framework, Ofsted inspectors will:

• Ask to see the safeguarding policy and check that it reflects current KCSIE guidance
• Check whether behaviour and exclusions policies are consistent with school practice
• Look for evidence that statutory policies are published on the school website where required
• Assess whether the governing body or trust board has meaningful oversight of policy review

The inspection report for a primary school in the South West noted that "governors were not able to confirm when key policies had last been reviewed." This is not unusual. Governors often rely on the business manager or headteacher to manage the review schedule, and when that delegation is not tracked, it is invisible to governors.

Our free Ofsted Statutory Policies Checklist covers the policies Ofsted inspectors typically look for, mapped to the inspection framework. It is a useful pre-inspection self-assessment tool.

The Multi-Academy Trust Coordination Problem

MATs with ten or more schools face a policy management challenge that individual schools do not: the same trust-level policy applies to multiple schools, but the review process needs to be coordinated centrally while accountability stays clear.

Common failure modes in MAT policy management:

The version drift problem. The central policy was updated at trust level. Not all schools have adopted the current version. An inspector at school five visits and finds a policy two versions old.

The ownership ambiguity problem. The data protection policy is owned by the trust. But when an individual school's data practice generates a complaint, the school's senior leadership does not know whether the policy is current or who approved the most recent version.

The review log problem. The trust board approves the annual policy review at a board meeting. The minutes record "all statutory policies reviewed and approved." But there is no individual record of who reviewed each policy, what was changed, and against which guidance. At inspection, the single-line minute is not sufficient evidence.

A policy register that distinguishes clearly between trust-level and school-level policies, assigns named owners to each, and maintains a timestamped review log resolves all three. The Policy Register Template lets you build this structure — free, browser-based, CSV export.

A Practical Review Calendar for Schools

Schools with fifty or more policies cannot review everything at once without it becoming a governance formality. The approach that works is a rolling calendar distributed across the academic year:

September: Safeguarding and child protection policies (reviewed against updated KCSIE before the start of term), behaviour policy (reviewed against updated DfE behaviour guidance, typically updated annually)

October–November: SEND policy and information report, admissions arrangements (the statutory determination deadline under the School Admissions Code is 28 February for the following academic year, so review in autumn before that deadline)

January: Finance policies and charging and remissions policy, health and safety policy

February–March: Data protection and privacy notices, equality objectives (must be published)

April–June: Governance and scheme of delegation (before annual governors' skills audit), staff HR policies (contracts, disciplinary, grievance)

August–September: Website publication review — check that all required policies are still published and up to date before the new academic year starts

This is a framework, not a prescription. The right calendar for your school depends on your governance structure and the specific policies in scope. The Policy Review Schedule Generator helps you map your policy list against a rolling calendar and exports to a format you can share with governors.

Managing the Governing Body's Policy Oversight Responsibilities

Governors are not expected to review every policy line by line. Their governance role is to assure themselves that the school has the policies it needs, that they are current, and that there is a system in place for keeping them that way. The business manager's job is to make that assurance possible.

In practice, this means:

• Governors should receive a regular update — at least termly — showing which policies are current, which are coming up for review, and which are overdue
• A one-page policy status report is more useful than a verbal reassurance
• Governors should formally minute their approval of any policy changes, particularly for statutory policies
• The clerk to governors should maintain a record of which policies have been formally approved and when

When Ofsted asks whether "governors have a good understanding of the school's policies," what they are assessing is whether governors can speak to the policy governance system, not whether they know the contents of every policy. A clear register with a governance trail makes this answerable.

PolicyBoard is designed to give school business managers and MAT clerks exactly this: a policy register with review dates, automated reminders before deadlines, and a governor-facing compliance view that shows the current status of the entire policy library. Join the waitlist to be notified when it launches.

Sources

• DfE: Maintained Schools Governance Guide
• DfE: Academy Trust Governance Guide
• DfE: Keeping Children Safe in Education

This guide is written for school business managers, MAT clerks, and school governors managing policy obligations at UK maintained schools and academy trusts. It is general guidance based on published DfE documentation. Policy requirements change — always verify obligations against current DfE guidance and your school's specific legal framework. It is not legal advice.