Explains risk and assurance controls in relation to digital inclusion and access, covering scope, evidence, decision authority, material exceptions and continuing assurance.
The contemporaneous reference point for digital inclusion and access is 2023 technology and education evidence. Its status should be distinguished from the jurisdiction-specific evidence required for implementation. The principal risks associated with risk and assurance controls for the applicable expectation should be assessed as connected conditions. The public-interest assessment of the control should consider access, learning, fair treatment and the reliability of information on which learners make consequential decisions.
At the publication date, 2023 technology and education evidence provides the relevant international context for the control. In work concerning digital inclusion and access, any consequential application still requires evidence from the affected jurisdiction or institution. Interpretation of the matter should identify the required outcome, the scope to which it applies and the evidence capable of demonstrating effective operation. Analysis should state the unit of analysis, reference period, coverage, exclusions and treatment of missing information. Material differences in population, setting or method should remain explicit in any comparison.
Scope and application of risk and assurance controls for digital inclusion and access
For digital inclusion and access, the public interest is not confined to institutional compliance. A change in delivery mode should not weaken the defined learning outcomes, learner protection, accessibility or reliability of assessment. Review of risk and assurance controls for the applicable expectation should include the experience of affected learners, particularly where aggregate reporting may conceal exclusion, delay or unequal treatment.
Interpretation of the control should identify the required outcome, the scope to which it applies and the evidence capable of demonstrating effective operation. Handovers between responsible functions require examination because material control gaps may otherwise remain concealed. The public-interest assessment of the applicable expectation should consider access, learning, fair treatment and the reliability of information on which learners make consequential decisions.
For digital inclusion and access, implementation should be organised around a decision that can be tested. Reporting on the applicable requirement should distinguish established fact, analytical judgement and planned action. Material revisions should retain their reason and effective date. The principal risks associated with the assurance conclusion should be assessed as connected conditions.
Public information on the control should state the applicable scope and limitations in terms that affected users can understand, including the basis for any later correction. Interpretation of the applicable expectation should identify the required outcome, the scope to which it applies and the evidence capable of demonstrating effective operation.
- Support staff and learners.
- Assure assessment validity.
- Monitor engagement without intrusive surveillance.
- Define the educational purpose of the technology.
- Maintain continuity and supplier exit controls.
Evidence required
A narrow control over digital inclusion and access may create false assurance. Reporting on risk and assurance controls for the applicable expectation should distinguish established fact, analytical judgement and planned action. Adverse cases should form part of the sample wherever they may reveal a material control weakness.
The assurance record for the matter should permit another competent reviewer to understand the evidence, method, judgement and treatment of material exceptions. Review of risk and assurance controls for the applicable requirement should give particular attention to adverse cases, unequal effects and errors that learners may be unable to identify or remedy after the event. The record for digital inclusion and access should distinguish a finding that requires action from an observation that supports no formal conclusion.
The control concerning the applicable requirement should be expressed at the level established by the evidence. Risk assessment for the matter should consider severity, reach, duration, recurrence and detectability, with escalation where learner impact may be material.
The principal risks associated with the applicable expectation should be assessed as connected conditions. For decisions concerning digital inclusion and access, analysis should state the unit of analysis, reference period, coverage, exclusions and treatment of missing information. A comparison is reliable only if material differences remain visible. Review of the applicable expectation should include the experience of affected learners, particularly where aggregate reporting may conceal exclusion, delay or unequal treatment. Review of the applicable expectation should give particular attention to adverse cases, unequal effects and errors that learners may be unable to identify or remedy after the event. Review of the control should give particular attention to adverse cases, unequal effects and errors that learners may be unable to identify or remedy after the event.
Public information on the applicable expectation should state the applicable scope and limitations in terms that affected users can understand, including the basis for any later correction. The assurance record for the applicable expectation should permit another competent reviewer to understand the evidence, method, judgement and treatment of material exceptions. In work concerning digital inclusion and access, transparent treatment of reporting changes prevents artificial movement from being read as substantive progress or decline.
For digital inclusion and access, where responsibilities for delivery are shared with partners, suppliers or several public bodies, responsibility should be mapped across the complete service. Responsibility for the applicable expectation should be identifiable at each consequential decision point. Delegating operational work does not transfer accountability for its effect on learners. Division of delivery responsibilities must not create gaps in learner protection.
The appropriate response to the control is therefore one of controlled implementation and documented review. Arrangements for the applicable expectation should provide accurate information, timely support and an accessible route for correction or review without adverse treatment. Reporting on the applicable expectation should distinguish established fact, analytical judgement and planned action.