This guide explains Arbor's policy for requesting an audit of activity on your Arbor site. It covers who is authorised to make these requests, the reasons for requesting an audit, and the specific information our Support Team needs to investigate effectively.
What is an Audit?
An audit is a formal investigation into data that has been created, accessed or updated, or deleted on your site.
Who can request an audit?
For data protection and safeguarding reasons, audit requests can only be made by Senior Leadership staff. This includes the Headteacher, Data Protection Officer, or MAT CEO.
If you are an administrator or office staff member, you must ask a senior staff member to submit this request on your behalf.
What can we audit ourselves?
Staff are able to access audits of attendance and assessment data.
Before you request an audit
Because audits often involve sensitive data, potential security breaches, or police investigations, we must strictly verify that the person requesting the audit is authorised to do so. If a request comes from a non-senior staff member, we will ask for a senior leader to contact us directly or provide written confirmation.
Partner Supported Schools
If your school is supported by a Support Partner, your Partner must CC a senior staff member (such as the Headteacher) into the request or attach a confirmation email from them for Arbor to proceed with an Audit.
Submitting your request
When contacting the Support Team to request an audit, please provide as much detail as possible. Specific information allows us to carry out an accurate investigation more quickly.
Please include the following details in your request:
Date range – The specific dates and times you want us to investigate.
User accounts – The Arbor IDs of users involved.
Data items – The specific records, marks, or data fields that have been changed or deleted.
Common reasons for requesting an audit
Data loss – Data appears to have been deleted or updated without the knowledge or consent of your school
Data loss - Data appears to have been updated or deleted by mistake
Data Protection – Communications being sent to the wrong person
Data breaches - An unauthorised person seems to be logging into a staff account
- Police investigations/safeguarding
FAQ
Can I request an audit of page visits?
Yes, we can audit which pages users visited. However, only the last 15 days of page visit data are readily available. If you require data from a period beyond this timeframe, there may be a fee for your school. It is therefore crucial that audits are requested as soon as possible.
Comments
Article is closed for comments.