School Security Systems: The Complete UK Installer's Guide 2026
A primary school with 210 pupils and a 3,000-pupil multi-academy trust face the same three threats — out-of-hours burglary, fire, and an unsupervised visitor reaching a classroom — but need very different budgets to cover them. This guide sets out a UK-specific school security systems specification: what Keeping Children Safe in Education (KCSIE) 2026 and DfE estate guidance actually require, which cameras, access control, fire and intruder products fit a school site, and how to network it all without putting CCTV traffic on the same VLAN as 800 pupils' Chromebooks.
What this guide covers
- What KCSIE 2026, DfE site security guidance and the Regulatory Reform (Fire Safety) Order 2005 require of a school site
- Perimeter, gate and car-park cameras — including ANPR for drop-off zones
- Vandal-resistant corridor cameras and a budget HiLook tier for multi-academy trust rollouts
- Reception, visitor management and staff-only access control
- EN 54 fire detection and out-of-hours intruder protection on one Ajax hub
- Campus Wi-Fi, PoE and keeping CCTV traffic off the teaching network
- ICO rules on CCTV in schools, three reference builds, and a commissioning checklist
Why a school site is a different brief to any other building
A school combines a public-facing reception, a supervised perimeter, high-value IT and AV equipment, and several hundred children on site every day — which is why the specification has to satisfy safeguarding law, not just a risk assessment. Keeping Children Safe in Education (KCSIE) 2026, the DfE's statutory safeguarding guidance, now requires governing bodies to show "clear, effective arrangements" for identifying and supervising visitors, with a documented sign-in record — the guidance explicitly flags a paper visitor book as no longer adequate. That single change is doing a lot of the buying decision for video door entry and access control on this year's school jobs.
Separately, the DfE's school and college security guidance collection hosts risk-assessment, lockdown, invacuation and business-continuity templates that reference physical security measures directly, and every school remains "relevant premises" under the Regulatory Reform (Fire Safety) Order 2005, meaning a responsible person must hold a current fire risk assessment covering detection, not just extinguishers and signage.
What DfE guidance actually specifies for cameras and Wi-Fi
The DfE's own estate management guidance gives installers a genuine spec floor to quote against, not just best practice. Its "Digital technology in your estate" guidance states that CCTV cameras should be at least 1080p resolution and 15fps, with external cameras rated IP66 and fitted with infrared night capability, recording to a dedicated NVR or secure cloud store kept out of public areas. On networking, the same guidance calls for at least one Wi-Fi access point per classroom and at least two APs in halls, using professional-grade rather than consumer equipment, with a server room sized to a minimum of 3.4m × 2.2m for a single rack, dedicated power and no flammable storage.
Every camera in this guide clears the 1080p/IP66 floor comfortably — most are 4-8MP with IP67 housings — so the practical job for an installer is mapping DfE's minimum onto the school's actual risk areas: gates, car parks, corridors, and the reception desk that now carries a statutory visitor-supervision duty.
The scale of the problem: theft, fire and intrusion in UK schools
UK police data shows schools are a persistent, low-clearance target for burglars. Freedom of Information requests to UK police forces covering 2021-2025, reported by Padlocks.co.uk, recorded 2,000+ burglaries at UK schools and colleges over the five-year period from the forces sampled, with charge rates as low as 3-7% in some regions — West Yorkshire alone logged 755 incidents and over £168,000 stolen, with only 47 (6%) leading to a charge. Fire risk is disproportionately concentrated in education too: a Zurich Municipal study (reported via Insurance Business UK, using 2019 figures — the most recent published dataset we could verify) found around 40 UK schools a month suffered a fire, disrupting almost 20,000 pupils' education in that year, with only around 2% of schools sprinkler-protected and 66% of inspected schools rated "poor" for fixed fire protection.
Neither figure is scaremongering for its own sake — both point at the same conclusion for an installer: out-of-hours intruder cover and EN 54 fire detection are not "nice to have" add-ons to a school CCTV job, they are the two systems most likely to actually get used.
Perimeter, gates and the drop-off zone
The busiest, highest-risk minutes of a school day happen at the gate during drop-off and pick-up, so ANPR and long-range PTZ earn their place on the perimeter layer. The Hikvision iDS-2CD7A46G2/LM-IZHSY 4MP DeepinViewX ANPR bullet camera reads number plates at the vehicle gate and staff/visitor car park, letting a facilities team match a car to an authorised drop-off list rather than relying on a member of staff physically checking every vehicle. For open playing fields and a full perimeter fence line, the Hikvision DS-2DE7A432IW-AEB(T5) 32× zoom PTZ with 200m IR range covers ground that fixed cameras cannot, and on a smaller primary site the wall-mounted Hikvision DS-2DE3A400BW-DE(F1)(T5) 4MP ColorVu PTZ is a lower-cost way to keep an eye on a single car park or drop-off loop. Read our Hikvision ANPR cameras guide and Hikvision PTZ camera installer guide for the full model range and lane-width sizing.
Corridors and the building envelope
Corridor cameras in a school need to survive being knocked, kicked and occasionally used as a coat hook, which is why vandal-resistant housings matter more here than on most commercial jobs. The Hikvision DS-2CD2187G3-LIS2UY 8MP G3 Hybrid dome pairs a reinforced dome with dual microphones, useful for capturing audio context around an incident report, while the Hikvision DS-2CD2546G2-IS 4MP AcuSense mini dome filters false motion triggers from moving foliage or a flag outside a window, cutting the number of irrelevant alerts a site team has to review after a break-in attempt.
A budget HiLook tier for multi-academy trust rollouts
A multi-academy trust rolling the same camera spec across eight or twelve sites has a different problem to a single school: per-camera cost multiplied by every building. HiLook exists precisely for that brief — the same H.265+ compression and PoE power budget as the Pro-tier Hikvision range, at a lower unit cost. The HiLook IPC-T249HA-LU 4MP Smart Hybrid turret, HiLook IPC-D149HAA-LU 4MP ColorVu 3.0 dome and HiLook IPC-T249HAA-LU 4MP ColorVu 3.0 turret cover corridor and classroom-block duty at a price point that makes a 12-site trust rollout affordable, without dropping below the DfE's 1080p/15fps floor. See our HiLook CCTV buyer's guide for the full tier comparison against Hikvision Pro.
Reception, visitor management and the KCSIE 2026 visitor duty
KCSIE 2026's visitor-supervision requirement effectively asks every school to replace the paper sign-in book with something that identifies a visitor, records the time, and lets reception staff see who is at the door before buzzing them through — which is exactly what video door entry does. The Hikvision DS-KV8213-WME1 video door station gives a main reception a two-way video call before release, and the Hikvision DS-KIS604-P(C) IP video intercom kit with 7" indoor touchscreen suits a gatehouse or a second entrance that isn't staffed all day. Pairing either with a digital sign-in log turns a "visitor walked past reception unchallenged" finding into a documented, auditable process, which is what the new guidance is actually asking for.
Access control for staff-only zones
Not every door in a school should open to every badge — server rooms, chemical stores, staffrooms and SEND-support areas typically need a staff-only reader rather than a full visitor-facing intercom. The Hikvision DS-K1108AMK Mifare card reader with keypad covers a standard staff-only door on a card-plus-PIN basis, and where a zone also needs to be armed and disarmed as part of the intruder system, the Ajax KeyPad Plus lets a site manager arm a store cupboard or IT suite on a tag, code or app press without touching the school's main alarm zones. Our Hikvision access control guide covers reader wiring and door-controller sizing in more depth.
Fire detection and Fire Safety Order compliance
Every school is "relevant premises" under the Regulatory Reform (Fire Safety) Order 2005, and Zurich Municipal's data above shows detection coverage is where many sites actually fall short, not extinguisher provision. Ajax's EN 54 certified wireless range lets a school add proper point detection without rewiring a listed or Victorian-era building: the Ajax FireProtect wireless point smoke detector covers classrooms and corridors, while the Ajax FireProtect wireless point heat detector is the correct choice for a kitchen, boiler room or workshop where a smoke sensor would false-trigger on steam or dust. Read our Ajax Fire Hub Jeweller EN54 guide for hub sizing and zone planning.
Out-of-hours and holiday intruder protection
A school is at its most vulnerable when it is empty — evenings, weekends and the six-week summer holiday — which is exactly when the burglary figures in the section above were logged. The Ajax GlassProtect acoustic glass-break detector covers classroom-block windows without needing a sensor on every pane, the Ajax DoorProtect Plus U contact, shock and tilt detector protects fire exits and store-room doors against both opening and forced entry, and the Ajax Wireless Alarm Hub2 Kit 3 ties detectors, keypad and sirens into one out-of-hours system that a keyholder can arm from a phone on the way out. All three sit on the same Jeweller radio protocol as the FireProtect detectors above, so a single Ajax hub runs the intruder and fire strategy side by side. See our Ajax wireless alarm systems guide for full hub and detector sizing.
Campus networking: Wi-Fi, PoE and keeping CCTV off the teaching network
A school campus is usually several buildings on one site — a main block, a sports hall, a dining hall, maybe a sixth-form or SEND annexe — and the network has to carry CCTV, staff Wi-Fi, pupil devices and guest access without any of them interfering with the others. The Ruijie RG-EG105G-P-V3 cloud-managed PoE+ router is explicitly listed by Ruijie among its target verticals for schools, and its captive-portal guest authentication is the right tool for keeping a BYOD or guest network off the same segment as CCTV traffic — confirm exact VLAN tagging against Ruijie's own configuration guide for the specific segmentation your design needs. In each classroom block, the Ruijie RG-NBS3100-8GT2SFP-P-V2 PoE+ switch powers cameras and access points from the local wiring closet, while the Ruijie RG-NBS3200-24GT4XS 24-port switch with 10G SFP+ uplinks makes sense as the core switch in an admin block or server room. For sports halls and assembly spaces, the DfE's "at least two APs in halls" guidance points straight at a high-density unit like the Ruijie RG-RAP2260(H) Wi-Fi 6 AX6000 ceiling AP, which supports up to 512 concurrent client connections on dual 2.5Gbit uplinks. Our Reyee networking for CCTV guide covers switch and AP sizing for a full campus in more detail.
Recording: NVR sizing for a school site
Camera count on a school site scales fast once gates, corridors, halls and car parks are all covered, so NVR channel count needs headroom for the next building phase, not just today's camera list. A single-block primary school with under 8 cameras is well served by the Hikvision DS-7604NXI-K1/4P(D) 4-channel PoE NVR, while a secondary school or academy running 12-16 cameras across several buildings needs the Hikvision DS-7616NXI-K2/16P(D) 16-channel PoE NVR. Both run Hikvision's AcuSense human/vehicle filtering, which matters on a school perimeter where false alerts from wildlife or weather are otherwise constant.
Data protection: the ICO's rules for CCTV in schools
A school CCTV system is personal data processing under UK GDPR the moment it captures an identifiable pupil, so the ICO's guidance on video surveillance applies in full: coverage must be "necessary, proportionate and the least intrusive means", signage must be visible before someone enters a monitored area and name the operator and purpose, and a Data Protection Impact Assessment is required before installing a new system, expanding coverage significantly, or adding analytics such as facial recognition. Toilets, changing rooms, medical rooms and counselling spaces are effectively off-limits for a camera except in exceptional, governing-body-authorised circumstances. None of that changes the camera spec in this guide — it changes where you point it and what paperwork sits behind the install, which is worth raising with the school's DPO before first fix, not after.
Managing security across a multi-academy trust
A trust running eight or more sites needs one thing a single school doesn't: a consistent way to check every site's cameras, alarms and access logs from one desk, rather than a different login per building. Standardising on one client platform across every site — Hik-Connect for remote handover and app access, iVMS-4200 for a facilities team managing multiple NVRs from one desk — is usually the difference between a trust-wide rollout that a small estates team can actually run and one that quietly falls out of date site by site. Our Hik-Connect installer setup and customer handover guide covers exactly that multi-site handover process.
Three reference builds
The table below sizes three common school scenarios against the products covered above — use it as a starting bill of materials, not a finished quote.
| Site type | Cameras & NVR | Access & fire | Networking |
|---|---|---|---|
| Small primary (1 block, <200 pupils) | 4-6 × DS-2CD2546G2-IS + 1 × DS-2DE3A400BW-DE PTZ on DS-7604NXI-K1/4P(D) | 1 × DS-KV8213-WME1 reception + 2-3 × FireProtect + Hub2 Kit 3 | 1 × RG-EG105G-P-V3 + 1 × RG-NBS3100-8GT2SFP-P-V2 |
| Secondary academy (multi-block, 800-1,500 pupils) | 10-16 × DS-2CD2187G3-LIS2UY + ANPR + 32× PTZ on DS-7616NXI-K2/16P(D) | DS-KIS604-P(C) + K1108AMK readers + FireProtect per block + GlassProtect/DoorProtect out-of-hours | RG-NBS3200-24GT4XS core + RG-NBS3100 per block + RG-RAP2260(H) in halls |
| Multi-academy trust (8+ sites) | HiLook IPC-T249HA-LU / D149HAA-LU / T249HAA-LU per site, standardised spec | Ajax KeyPad Plus per site, FireProtect to RRFSO 2005, centrally logged | RG-EG105G-P-V3 per site + centralised Hik-Connect/iVMS-4200 monitoring |
Camera selection by location
Use this table to match a camera to the risk area it's covering, rather than fitting the same model everywhere on site.
| Location | Recommended camera | Why |
|---|---|---|
| Vehicle gate / car park | iDS-2CD7A46G2/LM-IZHSY ANPR bullet | Automatic plate capture for drop-off/pick-up control |
| Perimeter fence / playing fields | DS-2DE7A432IW-AEB(T5) 32× PTZ, 200m IR | Long-range coverage of open grounds |
| Small-site car park | DS-2DE3A400BW-DE(F1)(T5) 4MP PTZ | Lower-cost wall-mounted PTZ for a single drop-off loop |
| Corridors & communal areas | DS-2CD2187G3-LIS2UY 8MP dome | Vandal-resistant, dual mic for incident audio |
| Classroom-adjacent corridors | DS-2CD2546G2-IS AcuSense mini dome | Human/vehicle filtering, fewer false alerts |
| Multi-academy trust, budget tier | HiLook IPC-T249HA-LU / IPC-D149HAA-LU / IPC-T249HAA-LU | Lower cost per camera across many sites, still clears the DfE 1080p/15fps floor |
Commissioning and compliance checklist
Before handover, confirm the install satisfies both the technical spec and the paperwork a school inspection will actually ask for.
- Camera resolution and frame rate meet or exceed the DfE's 1080p/15fps floor, with IP66+ housings externally
- A DPIA has been completed and signed off by the school's DPO before go-live
- Signage is visible before entry to every monitored area and names the system operator
- No camera covers a toilet, changing room, medical room or counselling space
- Visitor sign-in is digital, timestamped and tied to the video door entry system, not a paper book
- Fire detectors are EN 54 certified and the fire risk assessment references them by location
- Guest/BYOD Wi-Fi is segregated from the CCTV and admin VLAN
- At least one AP per classroom and two APs in any hall, per DfE estate guidance
FAQ: school security systems
Do UK schools legally need CCTV?
There is no single law that mandates CCTV in every UK school, but the Regulatory Reform (Fire Safety) Order 2005 requires a fire risk assessment covering detection, and KCSIE 2026's visitor-supervision duty makes some form of monitored entry point a practical necessity for most sites.
What does KCSIE 2026 change for school visitor security?
KCSIE 2026 requires governing bodies to show clear, documented arrangements for identifying and supervising visitors, and flags an undocumented paper sign-in process as inadequate — pushing schools towards digital visitor logs paired with video door entry at reception.
Is CCTV in classrooms allowed under UK GDPR?
It can be, provided coverage is necessary and proportionate, a DPIA has been completed, and clear signage is in place; the ICO's guidance treats toilets, changing rooms and medical or counselling rooms as effectively off-limits regardless of justification.
Do school fire detectors need to be EN 54 certified?
EN 54 certification is the recognised standard for fire detection components and is the sensible baseline for any school installation, given the Fire Safety Order's requirement for a current, evidenced fire risk assessment.
Can staff Wi-Fi and CCTV safely share the same access points?
The access points can be shared, but traffic should be segregated at the network layer — a cloud-managed gateway with guest/BYOD authentication and VLAN separation keeps pupil devices off the same segment as CCTV and admin systems.
How many cameras does a typical secondary school need?
Most secondary academies in this guide's reference build run 10-16 cameras across multiple blocks, plus a gate/car-park ANPR camera and one or two PTZ units for open grounds — scaled up further where the site spans several buildings.
What is the DfE's recommended minimum camera resolution for schools?
The DfE's estate management guidance specifies at least 1080p resolution at 15fps, with external cameras rated IP66 and fitted with infrared night capability — every camera in this guide exceeds that floor.
Do multi-academy trusts need a different approach to a single school?
Yes — a trust benefits most from a standardised, budget-tier spec repeated across every site plus centralised monitoring through one client platform, rather than a bespoke design per building, which is why HiLook and cloud-managed networking feature heavily in a MAT rollout.
Can an intruder alarm and fire alarm share the same Ajax hub?
Yes — Ajax's FireProtect detectors and intruder detectors (GlassProtect, DoorProtect) run on the same Jeweller wireless protocol and can be managed from one Ajax hub, arming and disarming zones independently.
How long should school CCTV footage be retained?
There is no fixed statutory retention period; the ICO expects retention to be proportionate to purpose and no longer than necessary, so most schools set a policy of 30-31 days unless footage is flagged as evidence for an ongoing incident.
Related posts
- Martyn's Law Lockdown System: UK Installer Guide
- Ajax Keypad Comparison: KeyPad, Plus, TouchScreen & Outdoor
- CCTV Storage Guide: What Size Hard Drive Does Your NVR or DVR Need?
- Hik-Connect Installer Setup & Customer Handover Guide
- Ajax MotionProtect vs Pyronix KX: Which Wireless PIR for UK Intruder Installs
Ordering
Netview CCTV stocks every product in this guide for same-day dispatch from our Leicester warehouse. Browse the full range at netviewcctv.co.uk/brands or get in touch through the website for trade pricing on a multi-site rollout.
About the Author
