Risk and assurance controls for digital inclusion and access

The contemporaneous reference point for digital inclusion and access is 2023 technology and education evidence. Its status should be distinguished from the jurisdiction-specific evidence required for implementation. The principal risks associated with risk and assurance controls for the stated expectation should be assessed as connected conditions. A failed safeguard may conceal another weakness or prevent timely correction. The public-interest assessment of the control should consider access, learning, fair treatment and the reliability of information on which learners make consequential decisions. The conclusion remains incomplete unless central requirements are reconciled with evidence of local practice.

At the publication date, 2023 technology and education evidence provides the relevant international context for the control. Any consequential application still requires evidence from the affected jurisdiction or institution. Interpretation of the matter under review should identify the required outcome, the scope to which it applies and the evidence capable of demonstrating effective operation. Analysis of the assurance matter should state the unit of analysis, reference period, coverage, exclusions and treatment of missing information. Material differences in population, setting or method should remain explicit in any comparison.

Scope of this analysis

For digital inclusion and access, the public interest is not confined to institutional compliance. A decision concerning the stated expectation should recognise that a change in delivery mode should not weaken the defined learning outcomes, learner protection, accessibility or reliability of assessment. Review of risk and assurance controls for the stated expectation should include the experience of affected learners, particularly where aggregate reporting may conceal exclusion, delay or unequal treatment.

The technical issue within the matter under review concerns the basis on which a conclusion is reached. Interpretation of the control should identify the required outcome, the scope to which it applies and the evidence capable of demonstrating effective operation. Handovers between responsible functions require examination because material control gaps may otherwise remain concealed. The public-interest assessment of the stated expectation should consider access, learning, fair treatment and the reliability of information on which learners make consequential decisions.

Implementation of the stated expectation should be organised around a decision that can be tested. Reporting on the relevant requirement should distinguish established fact, analytical judgement and planned action. Material revisions should retain their reason and effective date. The principal risks associated with the assurance matter should be assessed as connected conditions. Gaps between public oversight and provider control should not remain implicit.

Public information on the control should state the applicable scope and limitations in terms that affected users can understand, including the basis for any later correction. Interpretation of the stated expectation should identify the required outcome, the scope to which it applies and the evidence capable of demonstrating effective operation.

• Support staff and learners and retain evidence sufficient for independent review.
• Assure assessment validity and retain evidence sufficient for independent review.
• Monitor engagement without intrusive surveillance and retain evidence sufficient for independent review.
• Define the educational purpose of the technology within a defined period and review the result.
• Maintain continuity and supplier exit controls and retain evidence sufficient for independent review.

Implications for digital and remote education provision

A narrow control over digital inclusion and access may create false assurance. Reporting on risk and assurance controls for the stated expectation should distinguish established fact, analytical judgement and planned action. Adverse cases should form part of the sample wherever they may reveal a material control weakness.

The assurance record for the matter under review should permit another competent reviewer to understand the evidence, method, judgement and treatment of material exceptions. Review of risk and assurance controls for the relevant requirement should give particular attention to adverse cases, unequal effects and errors that learners may be unable to identify or remedy after the event. The review should determine whether correction of an individual case is sufficient or broader action is required. The record should distinguish a finding that requires action from an observation that supports no formal conclusion.

The control concerning the relevant requirement should be expressed at the level established by the evidence. A sample may support a conclusion about the sampled process, but not automatically about every location or programme. Risk assessment for the matter under review should consider severity, reach, duration, recurrence and detectability, with escalation where learner impact may be material.

The principal risks associated with the stated expectation should be assessed as connected conditions. Analysis of the stated expectation should state the unit of analysis, reference period, coverage, exclusions and treatment of missing information. A comparison is reliable only if material differences remain visible. Review of the stated expectation should include the experience of affected learners, particularly where aggregate reporting may conceal exclusion, delay or unequal treatment. Review of the stated expectation should give particular attention to adverse cases, unequal effects and errors that learners may be unable to identify or remedy after the event. Review of the control should give particular attention to adverse cases, unequal effects and errors that learners may be unable to identify or remedy after the event.

Public information on the stated expectation should state the applicable scope and limitations in terms that affected users can understand, including the basis for any later correction. The assurance record for the stated expectation should permit another competent reviewer to understand the evidence, method, judgement and treatment of material exceptions. Transparent treatment of reporting changes prevents artificial movement from being read as substantive progress or decline.

Where the stated expectation involves partners, suppliers or several public bodies, responsibility should be mapped across the complete service. Responsibility for the stated expectation should be identifiable at each consequential decision point. Delegating operational work does not transfer accountability for its effect on learners. Division of delivery responsibilities must not create gaps in learner protection.

The appropriate response to the control is therefore one of controlled implementation and documented review. Arrangements for the stated expectation should provide accurate information, timely support and an accessible route for correction or review without adverse treatment. Reporting on the stated expectation should distinguish established fact, analytical judgement and planned action.